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PREFACE 


Project  MAC  was  established  in  1963  as  an  interdepartmental 
laboratory  at  the  Massachusetts  Institute  of  Technology,  to 
do  research  in  Multiple  Access  Computer  Systems  and  Machine 
Aided  Cognition.  This  effort  resulted  in  the  development 
of  the  CTSS  and  Multics  Systems.  Project  MAC  is  currently 
moving  toward  a  major  effort  in  Automatic  Programming. 

During  the  year  ending  June  30,  1972,  there  were  325 
persons  associated  with  Project  MAC.  They  included:  21  faculty 
members,  mainly  from  the  Department  of  Electrical  Engineering, 
Department  of  Mathematics  and  from  the  Alfred  P.  Sloan  School 
of  Management;  103  staff  members,  (DSR  Staff  and  Support  Staff), 
195  students,  (both  Undergraduate  and  Graduate),  and  8  guests. 

,  ..  This  year,  through  extensive  discussions  and  consultations 

both  within  and  outside  of  M.I.T.,  Project  MAC  arrived  at 
its  new  focus  on  Automatic  Programming.  One  effort  in  Automatic 
Programming  involves  a  system,  which  has  embedded  in  it,  extensile 
knowledge  of  the  subject  for  which  the  programming  is  being 
automated.  The  other  effort  is  based  on  making  it  easier 
to  build  large  program';  from  simplicr  programs.  The  first 
■‘■s  being  carried  out  in  the  newly  formed  Automatic 
Programming  Group  while  the  second  approach  is  being  carried 
out  in  the  Dynamic  Modeling  Group. 


The  Automatic  Programming  Group  plans  to  construct  Proto¬ 
systems  of  increasing  complexity  to  gain  experience  in  embedding 
knowledge  into  systems.  This  task  requires  new  programming 
techniques  and  languages.  Two  new  languages  called  PLANNER 
and  CONNIVER,  which  have  come  out  of  the  Artificial  Intelligence 
efforts  at  M.I.T.,  seem  the  most  promising  languages  for  embedding 
knowledge  into  systems.  Development  and  implementation  of 
these  languages  is  in  progress. 


The  Mathematical  Laboratory  System,  MACSYMA,  can  now 
carry  out  many  symbolic  manipulations  previously  considered 
very  difficult.  It  can,  for  example,  factor  polynomials  in 
several  variables  and  do  so  very  efficiently. 

As  the  Multics  development  effort  has  tapered  off,  the 
Computer  Systems  Research  Group  has  shifted  its  attention 
to  security  and  protection  in  Computer  Systems.  In  conjunction 
with  Honeywell,  Inc.,  new  follow-on  hardware  for  Multics  was 
specified,  which  is  especially  tailored  to  make  Multics  secure 
and  efficient.  This  will  be  in  operation  early  in  1973. 

,  The  Computation  Structures  Group  has  continued  its  investi¬ 
gation  into  base  languages,  oarallel  processing  schemata  and 
the  means  for  description  and  realization  of  digital  systems. 

The  Automata  Theory  Group  has  now  focused  its  attention  toward 
investigating  the  complexity  of  algorithms. 
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D“n'^  past  year»  the  basic  program  of  Project  MAC 
was  supported  by  the  Information  Processing  Techniques  Directorate 
of  the  Advanced  Research  Projects  Agency  (ARPA) .  Individual 

bv°thfn  re  fUfSd.b y  Several  othar  agencies!-  DySic  Soiling 

Generflitvabv°th^  N«J?nCe?  ^fectorate  of  ARPA;  Programming 
Generality  by  the  National  Science  Foundation;  and  the  implemen¬ 
tation  of  PLANNER  by  the  Office  of  Naval  Research.  P 
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AUTOMATIC  PROGRAMMING 


The  automatic  programming  group  has  been  formed  to  investigate 
the  generation  of  programs  from  descriptions  of  the  actions 
the  programs  arc  to  perform,  rather  than  from  a  description 
of  how  these  actions  are  to  be  performed.  To  do  this,  pro¬ 
gram  generating  programs  must  have  a  knowledge  of  possible 
methods  which  could  be  used  to  perform  the  actions.  They 
must  also  know  how  to  select  methods  appropriate  to  a  qiven 


Current  day  compilers  are  examples  of  program  generating  pro¬ 
grams.  'i hey  have  a  knowledge  of  machine  structure  and  thev 
attempt  to  find  the  best  series  of  register  operations  to  Der- 
form  a  desired  result  such  as  the  multiplication  of  a  series 
of  numbers.  To  do  this  requires  some  search,  but  primarily 
it  is  a  matter  of  incorporating  into  the  compilers  good  tech¬ 
niques  for  the  situations  which  arc  known  to  occur. 


In  order  to  extend  the  program  writing  capabilities  of  pro¬ 
grams  beyond  v/hat  current  compilers  can  do,  it  will  be  neces¬ 
sary  to  incorporate  into  them  knowledge  about  specific  pro¬ 
blem  areas.  As  with  compilers,  che  problem  is  to  represent 
this  knowledge  in  the  machine  in  a  way  that  it  can  be  employed 
wit.,  very  little  search.  F  y 

The  group  has  chosen  to  center  its  initial  investigation  in 
the  area  of  management-information  systems.  This  is  because 
a)  the  automation  of  programming  in  this  aiea  would  be  of 
great  practical  importance,  b)  much  can  be  done  by  solving 
problems  of  data  and  file  structures,  searching,  sorting,  and 
scheduling  which  are  quasi-universal  in  programming  c)  the 
^r®^.pr°vidos  a  ^ood  spectrum  of  problems  of  increasing 
A  prototype  system  is  being  constructed  and 
should  be  yielding  initial  results  in  a  few  months.  The  sys¬ 
tem  contains  two  major  components;  the  first  is  for  the  inter¬ 
active  specification  of  what  logical  information  processing 
is  to  be  done,  the  second  is  for  the  automatic  realization  of 
this  processing  on  a  specific  computing  system. 

Automatic  realization  of  the  processing  requires  the  design 
of  a  series  of  data  files  and  programs  which  do  the  specified 
processing  at  minimum  cost.  Two  methods  of  measuring  cost 

?uaUTOMle  dnves tigation:  the  charging  scheme  supplied 

with  the  IBM  OS/360  MVT  operating  system  and  the  evaluation 
procedure  used  by  the  SCERT  computer  systems  simulation  pack¬ 
age.  The  IBM  scheme  is  simpler  and  is  being  incorporated  into 
the  initial  prototype  system. 

Generation  of  the  files  and  programs  has  been  broken  into  two 
phases.  The  first  phase  constrains  the  files  and  programs  to 
a  specific  design.  The  second  phase  generates  PL/I  and  JCL 
to  realize  this  design  on  an  IBM/370  computer.  Three  methods 
of  implementing  the  first  phase  are  under  investigation.  The 
tirst  method  is  to  provide  a  series  of  commands  so  that  a  user 
can  design  the  files  and  programs  interactively  and  then  es- 
timate  the  cost  of  competing  designs.  The  system  checks  that 
ail  of  the  user's  design  decisions  arc  feasible  anu  consistent. 
The  user  is  also  able  to  ask  questions  about  a  partial  design. 
The  second  method  involves  the  use  of  search  and  heuristics  to 
generate  a  design  automatically.  The  heuristics  satisfy  the 
high  volume  processing  requirements  first  and  rely  on  the 
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assumption  that  a  costly  partial  design  does  not  often  lead 
to  the  best  total  design.  The  third  method  is  to  formulate 
the  problem  as  an  integer  programming  problem  and  to  seek  an 
optimal  solution  through  sophisticated  integer  programming 
techniques.  It  is  possible  that  optional  solutions  will  take 
much  .Longer  to  find  than  good  solutions,  without  being  appre¬ 
ciably  better.  However,  optimal  solutions  to  carefully  chosen 
problems  should  help  us  to  understand  the  performance  of  our 
heuristic  routines. 

Our  current  thoughts  are  that  the  interactive  design  of  the 
processing  to  be  done  will  proceed  in  two  phases.  The  first 
phase  will  be  the  discusson  with  knowledgeable  routines  of  the 
particular  ways  certain  standard  problems  such  as  inventory 
control  are  to  be  handled.  In  the  second  phase  the  system 
will  apply  these  methods  to  generate  an  information  system  for 
a  paiticular  configuration  of  physical  assets  operating  with 
a  specified  corporate  plan.  During  this  phase  specific  pro¬ 
blems  may  require  further  interactive  design. 

In  addition  to  this  central  thrust,  the  group  is  also  explor¬ 
ing  related  questions  such  as  the  analysis  of  programs  and 
sponsoring  the  development  of  LISP  on  MULTICS. 
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COMPUTATION  STRUCTURES 


The  Computation  Structures  Group  is  concerned  with  the 
analysis  of  fundamental  issues  arising  in  the  design  and 
construction  of  general-purpose  computer  systems  through  the 
formulation  and  study  of  appropriate  abstract  models.  The  past 
year  has  seen  new  developments  in  the  theory  and  application 
of  Petri  nets  as  a  model  of  systems  of  interacting  parts, 
improved  techniques  for  realizing  digital  systems  with  assur¬ 
ance  o.  correct  operation,  development  of  the  theory  of  data 
flow  schemata,  and  contributions  to  the  study  of  program 
correctness  and  programming  generality. 

A.  Petri  Nets 


Our  research  relating  to  Petri  nets  is  concerned  with  the 
theory  of  Petri  nets,  the  relation  of  nets  to  logic  circuits 
and  asynchronous  modular  systems,  and  the  use  of  Petri  nets  as 
a  model  for  the  behavior  of  systems  of  interacting  parts, 
including  systems  within  and  outside  the  domain  of  computer 


Timed  Petri  Nets 


Chander  Ramchandani  is  investigating  the  use  of  Petri  net 
models  in  the  performance  analysis  of  systems.  Petri  nets 
(8,  5)  are  an  attractive  model  for  studies  of  system  performance 
because  the  important  interactions  between  system  parts  are 
easily  represented.  Petri  nets  represent  the  ordering  relation¬ 
ship  of  events  in  a  system  that  mark  the  initiation  and 
te’.unac’on  of  activities,  but  do  not  represent  the  timing  of 
Tuen^S  °f  duratlons  of  activities.  For  performance  analysis 
he  Petri-net  model  of  a  system  must  be  augmented  with  timing 
into  rma  1 1 on . 


In  a  Petri  net  (Figure  1),  the  firing  of  a  transition  may 
represent  an  interval  of  activity  by  some  system  part.  If  the 
transition  is  enabled  (at  least  one  token  in  each  of  its  input 
places)  it  means  that  activity  of  the  system  part  may  beqin. 

We  associate  initiation  of  activity  with  picking  up  one  token 
from  each  input  place,  and  termination  of  activity  with  adding 
one  token  to  each  output  place.  This  corresponds  to  consider¬ 
ing  the  transition  to  be  two  transitions  and  a  place  p  as  in 
Figure  2. 


Figure  3  shows  a  timed  Petri  net  obtained  by  associating 
time  parameters  with  certain  transitions  of  the  net  in  Fiqure 
.  In  a  timed  net  transitions  without  time  parameters  repre¬ 
sent  sequencing  constraints  on  activities  as  in  a  conventional 
Petri  net.  Action  of  a  timed  transition  may  be  explained  in 
terms  of  Figure  2,  where  the  time  parameter  t(t)  is  associated 
with  place  p.  Transition  t'  may  fire  immediately  when  enabled 
or  any  time  later  (providing  it  remains  enabled).  Then  trans¬ 
ition  t"  becomes  enabled  and  fires  exactly  i (t)  time  units 
after  the  firing  of  t|.  Thus  the  firing  of  transitions  t'  and 
t  represents  initiation  and  termination  of  one  instance  of  the 
activity  represented  by  transition  t.  It  is  possible  for  a 
transition  t  in  a  timed  net  to  be  re-enabled  before  a 
previously  initiated  instance  of  the  associated  activity  has 
terminated.  In  fact,  many  instances  of  the  activity  may  be  in 
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tronsition 


place 


token 


Figure  I.  A  Petri  net. 


Figure  2.  Meaning  of  a  timed  transition. 
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t(o)  =  5 
r  ( b)  =  2 


Figure  3.  A  timed  Petri  net. 


(o)  o  timed  marked  graph 


(b)  periodic  schedule 


t(o)  =  3  i-(b)-  2  t(c)  =  4 


transition  a:  2-5,  8-11,  14-17,  . 

b:  0-2,  6-8,  12-14, . 
c:  2-6,  8-12,14-18,. 


•  transition 


ploce  witn  token 


Figure  4.  Periodic  schedule  far  a  timed  morked  graph. 
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progress  simultaneously,  as  we  shall  see  in  later  examples. 

The  number  of  tokens  in  place  p  is  the  current  number  of 
simultaneous  instances  of  the  activity, 

A  schedule  for  a  timed  Petri  net  is  a  set  of  sequences  of 
initiation  and  termination  times  for  the  timed  transitions  of 
the  net.  A  schedule  is  feasible  if  the  timed  net  can  exhibit 
the  behavior  specified  by  the  schedule.  A  schedule  is  not 
feasible  if  it  calls  for  initiation  of  an  activity  earlier 
than  allowed  by  terminations  of  other  activities.  A  feasible 
schedule  is  said  to  be  prompt  if  each  activity  always  initiates 
as  early  as  possible.  Here  are  examples  of  feasible  and  prompt 
schedules  for  the  timed  net  and  initial  token  distribution 
shown  in  figure  3: 


(a) 

a  feasible  schedule 
transition  a:  0-5, 

8-13,  13-18 

b:  2-4, 

4-6,  9-11,  11-13,  15-17 

(b) 

a  prompt  schedule 
transition  a:  0-5, 

5-10,  10-15 

b:  0-2, 

2-4,  5-7,  7-9,  10-12 

Every  timed  net  for  which  the  underlying  Petri  net  is  persistent 
(no  transition  ceases  being  enabled  except  by  firing)  has  a 
unique  prompt  schedule. 

We  have  studied  the  class  of  Petri  nets  known  as  marked 
graphs .  In  a  marked  graph,  each  place  is  an  input  place  of  at 
most  one  transition,  and  an  output  place  of  at  most  one  trans¬ 
ition.  All  transitions  of  a  marked  graph  fire  equally  many 
times  in  any  behavior  that  returns  the  net  to  its  original 
configuration.  In  consequence,  a  prompt  schedule  for  a  timed 
graph  is  periodic  in  that  each  timed  transition  initiates  at 
regular  intervals.  The  example  ir.  Figure  4  has  a  periodic 
prompt  schedule  with  period  six.  In  this  case,  the  rate  of 
firing  is  determined  by  the  circuit  containing  transitions  b 
and  c. 

Figure  5  illustrates  a  situation  where  several  instances 
of  an  activity  represented  by  transition  b  may  proceed  con¬ 
currently.  Instances  of  the  activity  represented  by  transition 
a  are  forced  to  occur  strictly  in  sequence  by  the  one-token 
self  loop.  The  prompt  schedule  shown  has  a  period  of  eight. 

The  computation  rate  of  a  timed  marked  graph  is  the  average 
rate  of  firing  for  any  transition  of  the  graph  in  a  prompt 
schedule.  For  the  example  in  Figure  4  the  rate  is  1/6;  for 
Figure  5,  the  rate  is  1/4. 

There  is  a  simple  algorithm  for  determining  the  computation 
rate  of  a  timed  marked  graph.  Let  the  vertices  (transitions) 
and  arcs  (places)  of  a  strongly  connected  marked  graph  be 


v  "  fvi . v 

A  =  (a^,  ....  ap} 
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where  an  arc  am  =  (v.^,  )  is  directed  from  transition  V;L  to 

vj '  and  ^et  Ti  be  tbe  time  associated  with  transition  v.  (t.  = 

0  if  is  not  a  timed  transition) .  For  any  strongly  connected 
marked  graph  one  can  find  a  set  of  simple  circuits  C^,  C 

that  cover  all  arcs  of  the  graph  (5).  Let  M .  .  be  the  number  m 
of  tokens  on  arc  (v^  v ^ )  in  the  initial  marking  of  the  net. 
Then  the  computation  rate  p  of  the  timed  marked  graph  is  given 
by 


. ...  ft 


k  =  1 . 


where 


■  £  n 


VCk 


is  the  sum  oi  the  times  associated  with  transitions  of  circuit 


C^  and 


£  "ij 


(Vi'Vj)tCk 


is  the  number  of  tokens  on  arcs  of  circuit  C 

k ' 

Figure  6  shows  a  "PERT"  chart  with  activities  a,b,c,d,e 
and  the  corresponding  timed  marked  graph.  Application  of  the 
foregoing  procedure  shows  that  the  computation  rate  is  1/8 
the  reciprocal  of  the  time  for  the  critical  path.  We  may  ask 
what  happens  to  the  computation  rate  if  Np  processors  are 

permitted  to  perform  activities  concurrently.  The  correspond¬ 
ing  marked  graph  is  shown  in  Figure  7,  where  it  is  assumed 
that  only  NR  instances  of  activity  e  are  permitted  at  one 

time,  but  arbitrarily  many  instances  are  possible  for  the  other 

values *"of SN  and  J1?”®  giV®S  ^  comPutation  rabes  for  several 
P  R 


Work  is  continuing  on  performance  analysis  of  systems 
represented  by  more  general  classes  of  Petri  nets.  Also,  the 
properties  of  Petri  nets  having  time  bounds  or  statistical 
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(o ) 


(b) 


t (o)  *  2  T(b)  *  6 


transition  a:  0-2,  2-4,  8-10,  10-12,... 

b:  2-8,  4-10,10-16,12-18,... 

Figure  5.  Marked  graph  with  concurrent  instances  of  on 
activity, 
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(a)  "PERT"  chart 


(b)  marked  graph 


Circuit  Nk  Tk 

ab  |  6 

cd  |  4 

aed  |  8 


Figure  6.  Computation  rate  of  a  timed  marked  graph 
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distributions  associated  with  transitions  are  being  studied. 
Canonic  Forms  for  Petri  Nets 


We  have  begun  investigation  of  notions  of  equivalence  and 
canonic  forms  for  Petri  nets.  For  the  special  case  of  marked 
graphs,  Henry  Baker  (2)  has  shown  how  to  reduce  any  marked 
graph  to  a  simple  form  which  is  the  same  for  all  marked  graphs 
equivalent  to  the  given  marked  graph.  P 


Suppose  G  is  a  marked  graph  and  N  is  some  subset  of  the 
transitions  of  G.  Then  if  u  is  a  firing  sequence  of  G,  the 
corresponding  derived  firing  sequence  u>N  is  obtained  from  w  by 

erasing  all  elements  that  are  not  members  of  N.  Let  G  and  G' 
be  marked  graphs  and  let  N  =  . tn)  be  a  set  of  n  trans¬ 

itions  that  appear  in  both  G  and  G'.  We  say  that  G  and  G'  are 
equivalent  with  respect  to  N  if  for  each  firing  sequence  w  of 
G  there  is  a  firing  sequence  w'  of  G'  such  that  ujn  and  ui'  are 

identical,  and  vice  versa.  The  two  marked  graphs  in  Figure  8 
are  equivalent  with  respect  to  N  =  {a,b}  since  in  each  case  the 
set  of  derived  firing  sequences  is  (ab  U  ba)*. 


First  we  give  two  rules  which  when  applied  to  any  marked 
graph  will  give  a  simpler  marked  graph  equivalent  to  the 
original  with  respect  to  all  of  its  transitions: 


— uA-e  A:  ^  an  arc  originates  and  terminates  on  the  same 
transition,  and  has  at  least  one  token,  it  may 
be  deleted. 


Rule  2:  Let  a  and  b  be  any  two  distinct  transitions,  and 
let  x  be  an  arc  from  a  to  b.  If  the  number  of 
tokens  on  arc  x  is  greater  than  or  equal  tc  the 
total  number  of  tokens  on  the  arcs  of  any  other 
simple,  directed  path  from  a  to  b,  then  arc  x 
may  be  deleted. 


Use  of  the  two  rules  is  illustrated  in  Figure  9.  Rule  1 
topreraove  arc  1  and  rule  2  is  used  to  delete  arcs  2, 

3  and  4.  For  each  of  the  three  marked  graphs,  the  firinq 
sequences  are  all  prefixes  of  the  infinite  string  (abc)00.  A 
marked  graph  for  which  no  applications  of  the  two  rules  are 
possible  is  called  a  minimal-arc  marked  graph. 

The  minimal  arc  form  of  a  marked  graph  always  has  the 
same  set  of  firing  sequences  as  the  original  marked  graph. 
Furthermore,  any  pair  of  marked  graphs  that  are  equivalent 
with  respect  to  a  one-to-one  correspondence  of  their  transitions 
have  the  same  minimal-arc  form.  Thus  the  minimal  arc  form  is 
canonic  for  these  marked  graphs. 

Now  suppose  N  is  a  set  of  n  transitions  common  to  two 
marked  graphs  G  and  G' .  How  can  we  tell  whether  G  and  G'  are 
equivalent  with  respect  to  N?  It  turns  out  that  if  G  is  a  live 
marked  graph,  it  may  be  reduced  to  an  n-transition  marked  araoh 
equivalent  to  G  with  respect  to  N.  This  is  done  by  carrying 
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out  the  steps  below  for  each  transition  t  of  G  that  is  not  a 
member  of  N: 

Step  1:  Delete  any  arcs  that  originate  and  terminate  at 
transition  t.  If  any  such  arc  has  no  token,  the 
marked  graph  is  not  live. 

Step  2:  Let  X  =  {x^  ....  xm}  be  the  set  of  input  arcs 
and  Y  =  {y x ,  ....  yn)  the  set  of  output  arcs  of 
transition  t.  Let  Mi  be  the  number  of  tokens  on 
arc  xi  and  let  N  j  be  the  number  of  tokens  on  arc 

yj- 

Step  3:  Replace  transition  t  and  the  arcs  in  X  U  Y  with 
-  the  arcs 

(z. ,|i  =1,  ....  m;  j  =  1,  ,  n} 

where  z^ .  originates  on  the  same  transition  as 
and  terminates  on  the  same  transition  as  yj. 
Put  M  +  N  tokens  on  arc  z 

i  3  ij 

Applying  this  procedure  to  either  marked  graph  in  Figure  8 
gives  the  canonic  form  in  Figure  10.  This  example  shows  that 
the  canonical  form  for  a  safe  marked  graph  (5)  is  not 
necessarily  safe. 


B.  Arbiters 

Arbiters  are  fundamental  units  of  digital  systems  that  are 
required  whenever  two  or  more  asynchronous  activities  compete 
for  access  to  a  shared  unit  or  resource.  A  basic  form  of 
arbiter  known  as  an  elementary  arbiter  is  illustrated  in  Figure 
11.  It  controls  access  to  a  shared  resource  by  two  users  -- 
user  1  and  user  2.  A  0-to-l  transition  on  either  one  of  the 
request  wires  is  a  signal  that  the  corresponding user  desires 
access  to  the  shared  resource.  in  the  absence  of  a  competing 
request  from  the  other  user  the  arbiter  must  promptly  produce 
a  0-to-l  transition  on  the  corresponding  grant  wire.  The  user 
signals  completion  of  his  use  of  the  resource  by  a  l-to-0 
transition  on  the  request  wire,  whereupon  the  arbiter  must 
respond  with  a  l-to-0  transition  on  the  grant  wire.  If  requests 
arrive  nearly  simultaneously  from  both  users,  the  arbiter  must 
promptly  and  unambiguously  grant  either  one  of  the  requests 
and  delay  granting  the  second  request  until  the  resource  is 
freed .  Correct  operation  of  an  elementary  arbiter  must  satisfy 
these  conditions: 

1.  It  must  never  occur  that  both  grant  wires  are  simul¬ 
taneously  at  level  1. 

2.  If  both  qrant  wires  are  at  0  and  at  least  one  of  the 
request  wires  is  at  1,  the  arbiter  must  grant  one  of 
requests . 
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firing  sequences  :  (obc)  *(  X  u  o  U  o  b) 
Figure  9.  Simplificotion  of  a  morked  groph. 


Figure  II.  The  elementory  orbiter. 
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We  have  found  that  any  requirement  for  arbitration  in 
asynchronous  digital  systems  can  be  met  by  a  modular  subsystem 
using  elementary  arbiters.  For  example,  an  arbiter  that  over¬ 
sees  sharing  of  a  resource  by  n  users  can  be  built  using  a 
binary  tree  of  elementary  arbiters  (14).  The  case  of  n  users 
and  m  servers  has  been  studied  thoroughly  by  Patil,  and  he  has 
recently  devised  an  improved  solution  based  on  n-user  and 
m-user  arbiters  (13)  . 

Designing  an  elementary  arbiter  that  functions  correctly  and 
always  acts  within  a  specified  time  interval  is  a  difficult 
problem.  When  the  two  request  wires  make  0-to-l  transitions 
nearly  simultaneously,  the  arbiter  may  make  an  arbitrary  choice, 
but  it  must  do  f •  •  without  hesitation,  and  without  the  appear¬ 
ance  of  spurious  signals  on  the  grant  wires. 

Suhas  Patil  lias  devised  an  elegant  scheme  for  building  an 
elementary  arbiter  that  will  operate  correctly  in  a  fixed  time 
with  extremely  small  probability  of  error.  This  scheme  makes 
use  of  a  subunit  called  finite  resolution  arbiter  (Fiji)  and 
illustrated  in  Figure  12.  An  FRA  can  fail  to  operate 
correctly  only  if  two  request  signals  arrive  with  a  separation 
of  f  time  units  or  less.  If  an  FRA  fails,  the  result  is  that 
both  grant  wires  switch  to  1. 

Now  consider  a  pair  of  FRA's  connected  in  cascade  as  in 
Figure  13a.  If  two  requests  arrive  at  FRA-1  separated  by  more 
than  6  time  units,  only  one  of  the  request  signals  will  reach 
FRA-2  and  operation  will  be  completed  correctly.  If  requests 
arrive  at  FRA-1  with  less  than  6  time  units  separation,  then 
FRA-1  will  transmit  both  grant  signals.  As--ume  for  the  moment 
that  the  two  request  signals  are  delayed  equally  by  FRA-1. 

Then,  so  long  as  A  >  26,  the  requests  arriving  at  FRA-2  will  be 
separated  by  more  than  6  time  units  and  FRA-2  wiil  grant  one 
and  only  one  of  the  requests . 

One  of  several  possible  cricuits  for  a  finite  resolution 
arbiter  is  shown  in  Figure  14.  Each  pair  of  NAND  gates  forms 
a  set-reset  flip  flop  which  is  forced  into  its  1  state  by  the 
presence  of  a  request  on  the  associated  input  wire.  The  setting 
of  one  flip  flop  prevents  the  other  flip  flop  from  being  set, 
thereby  blocking  its  associated  request.  If  two  requests 
arrive  at  nearly  the  same  instant,  both  flip  flops  will  be  set 
since  neither  will  be  fast  enough  to  block  the  other. 

The  time  interval  6  is  the  time  separation  of  request 
signals  such  that  a  request  signal  and  a  block  signal  arrive 
simultaneously  at  one  of  the  flip  flops.  In  this  circumstance 
the  flip  flop  may  be  placed  in  a  metastable  state  in  which  it 
may  remain  for  an  arbitrarily  long  time  (with  decreasing 
probability).  The  existence  of  metastable  states,  and  the 
certainty  that  failures  caused  by  circuits  persisting  in  meta¬ 
stable  states  have  been  problematic  in  computer  systems  has 
been  nicely  explained  by  Ornstein  (4). 
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input  timing  as°follows°  ^he ^  behavior  for  critical 
with  time  separation  less  than^nmo r®set  inPuts  become  1 
flop  flop  enters  its  metastaMe interval  t,  the 
commitment  to  one  of  the  stable  and.the  Probability  of 

,  stable  states  during  an  interval  dt 


d/T)  e  T//Tdt  where  T  is  a  char- 


after  elapsed  time  t  ia  i'  ( x )  at  = 

acteristic  time  of  the  flin  flora  ~~  *  •lo  a  cnar 

tion  P(T)  is  used  because  we  expect' ^that^he"11^  d°?Sity  func" 
commitment  during  anv  interv*?  P~?b  fc  th  Probability  of 
occurred  oarlior?  ”* 

as  A  is  made  larger.  Moreover2  fh»d  de^r®?ses  exponentially 
be  mas  as  small  as  desired  bv  addin  p£obfbllity  of  failure  may 
as  in  Figure  13b.  aeSlred  by  adding  further  FRA's  in  cascade, 

elementary tSrbiteJiJhaita?wavsrnnemPfSSible  b°  design  a  Perfect 

one  can  modify  the  FW  cS  so  that*  tixed  time' 

actable  Tnd£^-  SignalS  °nly  “Sn^ii^iieS^o 

be  constructed "which^ay  ^  "** 

(exponentially  distributed)  to  respond  ^  9  me 

f- •  Computation  Schemata 

the  goal"  o^reachinq  TleTtTr^  ?  C°mp"tation  schemata  has 
tations  for  algorithms  —  represent^  3ndln9  °f  9°od  represen- 

sshw  sags 

are  combined  in  a  single  qraph  Furthe^d00^1"  1  Speclf ications 
of  Rodriguez  has  led  to  the  study  of  d  r  d^eloPment  of  the  ideas 

results  from  these  two  directions  of  rLea^ron^IraUel 
schemata  are  reviewed  below.  parallel 


Productivity  in  Parallel  Schemata 


In  a  computation  schema  it  may  be 
occurring  during  a  computation  have  no 
value  produced  by  the  computation.  In 


that  certain  actions 
effect  on  any  output 
this  case  we  say  that 
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Figure  13.  Finite  resolution  orbiters 
connected  in  cascade. 
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Figure  14.  Circuit  for  finite  resolution  orbiter. 


-request  2 
eorlier 
(region  A) 


probobility  of 


Figure  15.  Foilure  unolysis  for  two  FRA’s  in  cascode. 
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these  actions  are  not  productive .  We  have  found  there  is  a 
trade-off  in  parallel  schemata  between  productivity  and  degree 
of  concurrency.  That  is,  to  achieve  maximum  parallelism,  it  is 
necessary  that  the  possibility  of  nonproductive  actions  be 
introduced.  John  Linderman  has  studied  this  matter  for  a  class 
of  computation  schemata  closely  related  to  the  parallel  program 
schemata  of  Karp  and  Miller  (9) ,  and  the  flow-graph  schemata  of 
Slutz  (17). 

These  schemata  have  separate  parts,  to  represent  the  com¬ 
munication  paths  for  data  and  the  sequencing  of  actions  by 
operators  and  decision  elements.  Since  the  distinction  between 
"transformations"  and  "tests"  is  so  pervasive  in  programming, 
we  feel  they  should  be  modeled  as  different  fundamental  actions 
in  computation  schemata.  For  this  reason,  our  data  flow  graphs 
contain  both  operators ,  which  model  elements  that  transform 
values,  and  deciders,  which  perform  tests  with  true/false 
outcomes.  Associated  with  each  operator  is  a  function  letter, 
and  with  each  decider  a  predicate  letter .  Specific  functions 
and  predicates  are  assigned  to  tEa  function  and  predicate 
letters  by  an  interpretation  of  the  schema.  In  this  way, 
several  operators  may  be  required  to  perform  the  same  trans¬ 
formation  —  or  several  deciders,  the  same  predicate  —  in  any 
interpretation  of  the  schema.  This  departure  from  the  Karp- 
Miller  model  permits  treatment  of  determinacy  and  equivalence 
for  a  broader  range  of  programs  and  systems. 

Each  operator  and  decider  has  associated  initiation  and 
termination  events .  When  an  operator  or  decider  initiates , 
values  are  read  from  its  ordered  set  of  input  memory  cells 
and  this  vector  of  values  is,  in  effect,  entered  into  a  first- 
in-first-out  queue.  Thus  multiple  initiations  of  an  operator 
or  decider  may  occur  without  intervening  terminations.  When 
an  operator  terminates,  it  writes  into  its  output  memory  cells 
the  values  obtained  by  applying  the  function  denoted  by  its 
function  letter  to  the  vector  of  values  taken  from  the  head  of 
the  queue.  For  each  decider  there  are  two  termination  events 
corresponding  to  the  true  and  false  outcomes  of  applying  the 
predicate  denoted  by  its  predicate  letter  to  the  vector  of 
values  at  the  head  of  its  queue. 

When  and  if  these  events  can  happen  is  specified  by  the 
control  of  the  schema.  A  variety  of  explicit  mechanisms  have 
been  used  to  represent  the  control,  including  finite  state 
machines,  precedence  graphs,  and  Petri  nets.  These  mechanisms 
share  the  property  that  they  specify  which  sequences  of  events 
are  allowed  and  which  are  not  allowed  as  possible  behaviors  of 
a  schema.  The  allowed  sequences  of  events  are  called  the 
control  sequences  of  the  schema.  Study  of  various  control 
mechanisms  has  sTiown  that  certain  properties  of  control 
sequences  —  persistence,  commutativity,  conflict  freedom,  and 
repetition  freedom  —  are  central  to  the  study  of  equivalence, 
determinacy,  parallelism  and  productivity,  regardless  of  the 
mechanism  used  to  specify  the  set  of  control  sequences. 

For  this  reason  we  have  studied  these  properties  of  schemata 
without  regard  to  the  mechanism  used  to  specify  the  set  of 
control  sequences . 
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Consider  the  program  below  in  which  w  and  x  are  input 
variables  and  y  and  z  are  output  variables: 

begin 

y  :=  f  (g  (w) } 

i_f  p(w,x)  then  z  :=  g(f(w))  else  z  :=  h(f(w)) 

end 

Two  schemata  for  this  program  are  shown  in  Figure  16.  To  be 
definitive,  the  control  sets  have  been  specified  by  Petri  nets. 
Examples  of  control  sequences  for  S^  include 


a  t  a  c  H  t^  b  cT  d  c 


tbtFbabaceec 

in  which  overbars  and  underbars  indicate  initiation  and  ter¬ 
mination,  and  the  superscript  T  or  F  refers  to  the  outcome  of  a 
decider. 

We  identify  certain  memory  cells  of  a  schema  as  an  ordered 
set  of  input  cells  and  an  ordered  set  of  output  cells.  Then  we 
may  discuss  equivalence  of  two  schemata  in  terms  of  producing 
the  same  output  values  when  given  identical  inputs.  In  Figure 
16,  w  and  x  are  the  input  cells  and  y  and  z  the  output  cells 
of  both  S^and  S2>  It  is  easy  to  see  that,  in  either  schema, 

any  allowed  sequence  will  assign  the  same  values  to  cells  y 
and  z  as  are  produced  by  the  program.  Hence  both  schemata  are 
"functionally  determinate"  and  are  equivalent  with  respect  to 
the  specified  input  and  output  cells. 

In  these  schemata,  an  issue  arises  that  is  not  present 
when  every  termination  event  puts  a  value  in  some  memory  cell 
and  all  cell  histories  affect  the  question  of  equivalence,  as 
in  the  Karp-Miller  theory.  It  is  now  possible  for  operators 
and  deciders  to  be  invloved  in  "useless  activity."  For 
example,  if  y  were  not  an  output  cell  of  schema  S1  or  S2, 

operators  a  and  c  would  not  be  productive.  Similarly  if  the 
same  sequence  of  actions  followed  either  outcome  of  a  decider, 
then  that  action  of  the  decider  would  not  be  productive. 

The  precise  formulation  of  this  notion  of  productivity 
requires  formalisms  we  do  not  wish  to  develop  here,  but  the 
central  idea  is  fairly  straightforward.  A  use  of  an  operator 
in  a  control  sequence  is  productive  if  subsequent  actions  by 
operators  "carry  its  result"  to  a  schema  output  cell  or  to  a 
productive  decider.  Since  an  action  by  a  decider  does  not 
directly  affect  contents  of  memory  cells,  determining  its 
productivity  is  not  as  easy.  We  consider  a  use  of  a  decider  to 
be  productive  if  the  schema  has  two  control  sequences  that 
define  inequivalent  computations,  and  ere  in  "disagreement 
about  decider  outcomes"  orly  at  the  given  decider  use.  For 
example,  consider  the  program 
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begin 


if  p (x)  then 

AJL  <i(x)  then  y  :=  f(x)  else  y  :=  g(x) 


else 


if  q(x)  then  y  :=  f(x)  else  y  :=  g(x) 


end 


y  may  be  S6t  tQ  f(x)  if  P(x)  is  ^lse,  and  g(x)  if 
ls  true,  one  might  conclude  that  this  us~of  "p  is  produc¬ 
tive.  However,  both  possibilities  exist  in  either  case  the 
^°1“being  determined  by  q{x);  hence  p(x)  is  not  really  pro- 
auctive,  m  agreement  with  our  definition.  ^  ^ 

i-hP  °f  thi®  research  has  been  directed  toward  identifvma 

the  most  appropriate  definitions  for  "productive  control  Y  9 

fq^nfs  '•  A  seemmgly  desirable  condition  is  that  every  use 
of  an  operator  or  decider  in  a  control  sequence  be  productive 

degreeUof  parallelis^th11?  prcd'lctivity  condition  limits  the 
aegree  of  parallelism  that  can  be  realized.  Suppose  a 

trrafamrLtuft:Perf0rmed  if  eith«  °f  ^  P~duces 


begin 


if  p(x)  or  q(x)  then  y  :=  f(x)  else  y  :=  g(x) 


end 


of  th^nfh  ei^her  :>(xl  or  is  found  to  be  true,  evaluation 

P^X)  and  ^P’°d,fCtiVe-  ThUS  Parallel  elation  of 

1  v\olate  the  strong  productivity  condition, 
re  studying  a  weaker  form  of  productivity  which  does 
not  clash  with  parallelism.  Y  Uoes 

data  Flow  Schemata 

Tt-  ic4!!  ®xamP^e  of  a  data  flow  schema  is  shown  in  Figure  17 

• a,  directed  graph  having  two  kinds  of  nodes:  actor  nodes 
nodes.  The  arcs  of  a  data  flow  scheme,  arel^s2^ 
ough  which  data  and  control  values  flow  from  actor  nodes 
to  link  nodes  and  from  link  nodes  to  actor  nodes  Link  notion 

ftdiL“V;1UHS  t0  sevsral  “*“  ££»  a^",kre°SS 

two  Kinds  data  links  drawn  as  small  solid  circles  for 
cnnfSSi  -ontr°r^I^ks  drawn  as  small  open  circles  for 

£h«tr°h  values •  Certain  data  link  nodes  are  the  input  nodes  of 

of  the  :™;Ta  W 

ss'irii  sar  «-  -S&  ss-iS: « 


28 


COMPUTATION  STRUCTURES 


There  are  five  kinds  of  actor  nodes: 

operator  square  box  with  a  function 

letter  written  inside. 

decider  diamond  box  with  a  predicate 

letter  written  inside. 

true  gate/false  gate  circle  with  T  or  F  written 

inside . 

merge  ellipse  with  T  and  F  written 

inside. 

Boolean  square  box  with  one  of  the  sym¬ 

bols  A,  V,  -i  written  inside. 

Each  arc  leaving  a  link  node  acts  like  a  first-in-first-out 
queue  for  values  waiting  for  use  by  the  actor  on  which  the  arc 
terminates.  A  value  arriving  at  a  link  node  is  replicated  as 
required  and  entered  in  the  queues  of  the  emanating  arcs.  In 
most  cases,  each  queue  will  either  be  empty  or  hole,  one  value. 
However,  permitting  unbounded  queues  permits  operation  of  a, 
data  flow  schemata  to  achieve  a  kind  of  maximum  parallelism 
we  shall  illustrate  by  a  later  example. 

Given  a  data  flow  schema  and  an  interpretation  of  its 
function  and  predicate  letters,  computations  by  the  schema  are 
described  by  sequences  of  actions  by  the  actor  nodes,  analogous 
to  the  firing  sequences  of  a  Petri  net.  An  operator ,  decider , 
or  Boolean  node  is  enabled  to  act  when  at  least  one  value  is 
available  from  each  of  its  input  arcs.  When  enabled,  one  of 
these  actors  may  "fire"  by  removing  one  value  from  each  input 
queue,  applying  the  specified  function,  predicate  or  Boolean 
operator,  and  sending  the  results  to  its  output  data  or  control 
link.  A  true  gate  is  enabled  by  the  availability  of  a  data 
value  and  a  control  value  from  its  input  arcs.  The  gate  fires 
by  removing  these  values  from  their  queues.  Then,  if  the 
control  value  is  true  the  data  value  is  sent  to  the  output  data 
link;  if  the  control  value  is  false  no  further  action  takes 
place.  The  false  gate  acts  in  an  analogous  manner.  A  merge 
node  acts  by  transmitting  a  value  from  its  F-input  arc  if  the 
control  input  value  is  false ,  or  a  value  from  its  T-input  arc 
if  the  control  value  is  true .  The  filled-in  arrows  on  certain 
control  links  indicate  that  a  false  value  is  entered  in  their 
queues  in  the  initial  configuration  of  the  schema.  This 
arrangement  is  needed  to  initiate  action  by  a  portion  of  a 
data  flow  schema  that  performs  an  iteration. 

According  to  these  rules  of  behavior,  every  actor  of  a 
data  flow  schema  is  persistent:  once  enabled  an  actor  becomes 
noc  enabled  only  by  firing.  From  this  fact  and  the  discipline 
by  which  actor  and  link  nodes  interact,  a  result  of  Patil  (12) 
shows  that  any  data  flow  schema  is  a  determinate  system. 

Study  of  the  schema  in  Figure  ±7  reveals  that  it  is 
equivalent  to  the  following  "while  schema": 
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Figure  18.  A  data  flow  schem 
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begin 

while  p  (x)  do 

if  q(x)  then  w  :=  f  (x)  else  w  :=  q(x) 

x  :=  h (w) 

end 

y  :=  X 
end 

Just  as  in  a  while  schema,  the  data  flow  schema  has  a  nested 
structure  indicated  by  the  dashed  lines,  and  uses  specific 
configurations  of  gate ,  merge  and  decider  nodes  to  form  condi¬ 
tional  and  iteration  subschemas .  A  data  flow  schema  having 
this  structure  is  said  to  be  well  formed.  Any  well  formou 
data  flow  schema  will  generate  exactly  one  value  at  each  output 
node  for  each  set  of  values  presented  at  the  input  nodes. 
Because  it  is  determinate,  any  well-formed  data  flow  schema 
determines  a  functional  dependence  of  output  values  on  input 
values.  We  consider  two  schemas  to  be  equivalent  if  both 
define  the  same  functional  dependence  of  outputs  on  inputs, 
and  this  is  true  regardless  of  the  interpretation  chosen  for 
the  function  and  predicate  letters. 

On  the  basis  of  work  by  Ashcroft  and  Manna  (1)  one  can 
construct  a  well-formed  data  flow  schema  equivalent  tc  any 
"goto  program"  or  any  program  schema  of  the  type  studied  by 
Paterson  (11).  Hence  the  general  equivalence  problem  for  data 
flow  schemata  is  unsolvable. 

It  has  been  found  that  the  theory  of  "free"  schemata  is 
more  rewarding  in  terms  of  positive  results  than  the  study  of 
unrestricted  schemata.  A  data-flow  schema  is  said  to  be  free 
if  no  two  actions  by  deciders  apply  the  same  predicate  to  the 
same  value.  Figure  18  illustrates  a  schema  that  is  not  free 
because  the  first  two  uses  of  decider  d  both  apply  predicate 
p  to  the  result  of  applying  f  to  the  schema  input  value.  Hence 
there  is  no  way  for  the  iteration  subschema  to  perform  exactly 
one  execution  of  its  body. 

John  Fosseen  (6)  has  found  it  possible  to  transform  free 
data  flow  schemata  in  such  a  way  that  any  pair  of  data  arcs 
may  be  tested  for  equivalence.  (Two  arcs  are  equivalent  if 
they  pass  the  same  sequence  of  data  values  in  any  computation.) 
We  hope  the  concepts  developed  to  obtain  this  result  will 
provide  further  insight  into  the  equivalence  problem  for  free 
data  flow  schemata. 

We  remarked  earlier  that  treating  the  input  arcs  of  actors 
as  unbounded  queues  permits  greater  concurrency.  The  data  flow 
schema  in  Figure  19  illustrates  such  a  case  and  is  based  on  an 
example  of  Keller  (10).  The  right-hand  portion  of  the  schema 
may  run  arbitrarily  ahead  of  the  left-hand  portion,  a  true  value 
being  entered  in  the  queues  of  arcs  a,  b,  and  c  for  each  cycle. 
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The  left-hand  part  may  operate  as  fast  as  it  can  until  the 
queues  are  emptied,  whereupon  (to  be  strongly  productive) 
operation  must  wait  for  further  decisions  to  be  made. 

Any  data  flow  schema  is  inherently  maximally  parallel  in 
the  sense  that  each  operator  and  decider  is  at  work  whenever 
decider316  available  for  some  productive  use  of  the  operator  or 

Weakly  Productive  Computations 

In  a  data  flow  schema,  actions  are  initiated  when  the 
required  input  values  are  present  and  the  action  (in  most  cases) 
is  known  to  be  productive.  As  an  interesting  exploratory  study, 
we  have  studied  properties  of  parallel  computations  in  which 
every  operation  is  initiated  as  soon  as  its  input  values  have 
been  computed,  so  long  as  some  possible  continuation  of  the 
computation  makes  productive  use  of  the  result.  Consider  the 
data  flow  schema  in  Figure  20,  which  represents  the  followinq 
program  with  input  variable  x  and  output  variable  y: 

begin 

while  p (x)  do 


If  execution  of  this  schema  is  performed  according  to  the  rules 
ear^er'  thfn. every  action  by  the  operators  (a  and  b)  and 
deciders  (d  and  e)  is  productive.  Let  us  consider  what  happens 
if  we  allow  all  weakly  productive  actions  to  initiate.  Suppose 
termination  of  the  first  uses  of  deciders  d  and  e  is  arbitrarily 
delayed.  Since  the  first  uses  of  operators  a  and  b  require  onlv 
the  initial  value  of  x,  these  uses  are  immediately  initiated, 
ineir  terminations  produce  values  that  are  inputs  to  further 
weakly  productive  uses  of  operators  a  and  b,  and  so  on.  These 
actions  define  the  unbounded  tree  of  values  illustrated  in 

Inh'  thS  haS  3  node  for  each  value  anV  computation 
y  the  schema  could  generate.  As  outcomes  of  decider  actions 
become  known,  portions  of  the  tree  of  values  become  useless 
and  may  be  deleted,  since  the  operator  uses  that  produce  these 
values  become  known  to  be  nonproductive.  For  example,  if  the 
first  use  of  decider  d  yields  false,  the  tree  of  possibly  useful 
values  is  as  in  Figure  21b,  and  if  deciders  d  and  e  have 

thaHn^Lur^r5  F'J  and  T'T'F'  resPectively,  the  tree  becomes 
that  in  Figure  21c,  and  represents  a  completed  computation. 

.Joseph  Qualitz  (15)  has  studied  the  bookeeping  requirements 
for  weakly  productive  computations,  and  has  devised  execution 
structures  in  terms  of  which  the  detailed  progress  of  such 
computations  may  be  studied.  Clearly  it  is  necessary  to  tag  each 
value  produced  by  a  schema  operator  with  the  assumptions  made 
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Figure  21.  Value  trees  from  a  weakly  productive 
computation. 
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about  decider  outcomes.  We  let  each  value  carry  a  color  which 
is  a  set  of  sequences  of  the  symbols  {T,  F,  f,  F }  one  seauence 

*  dSr  °f  the  SChema-  The  ^thout  overbars 

denote  known  outcomes,  whereas  letters  with  overbars  denote 

value  °UtC°meS-  In  Fi^es  21b,  21c,  colors  are  shown  for  each 

val„P«ALfnK  StagS  ln  3  Weakly  Productive  computation,  many 
values  ma\  be  associated  with  certain  value  nodes  of  a  schema 

in0t  us®ful  to  order  these  sets  of  values  because,  unlike 
normal  execution  of  a  data  flow  schema,  the  order  in  which 

used  Insir/3  n°^  ne=essarily  the  order  in  which  they  are 
of  l  Y3lUe  n0de  is  regar<3ed  as  holding  a  pool 

for  use  Therefore9ewhWlth  ^  aPProPriate  color ,  and  available 
“  Therefore,  when  an  operator  or  decider  has  several 

.  hP  fc  value  ?odes,  some  means  must  be  provided  for  identifying 

Soni^lnatl?nS/f  ValU6S  t0  Which  a  Unction  or  predicate  9 
should  be  applied.  This  is  done  by  associating  with  each  value 
an  index  that  is  distinct  for  each  cycle  of  any  loop  in  the 

useless  an^f^the^  — dfCiSi°n  iS  made'  certain  values  become 
must  be  inhibited?1  lnltlatl°n  of  actions  that  use  these  values 

We  have  devised  rules  of  execution  for  weakly  productive 
computations  and  have  shown  that  these  rules  correctly  simulate 
the  computations  of  any  well-behaved  data  flow  schema. 

D-  Inductive  Proofs  of  Program  Properties 

One  ol  the  purposes  of  studying  schemata  or  simplified 
programming  languages  is  to  isolate  aspects  of  programs  whfch 
must  be  encompassed  by  any  approach  to  the  construction  of 

is^ne  such  propertvtheTfUnCti°nS  computed  Programs.  Recursion 
h  property.  To  prove  equivalence  or  correctness 
resuits  about  recursive  programs,  some  form  of  argument  by 
inductron  must  be  made.  This  has  been  recognized V manypeople 
and  several  of  them  have  formulated  induction  rules  to  be  used 
for  particular  classes  of  programs.  Generally,  a  program  can 
be  viewed  as  falling  in  several  of  these  classes.  By  examining 
single  program  and  proofs  about  it  from  different  viewpoints 
we  have  been  able  to  clarify  the  relationships  among  these 
-irf  techniques.  By  means  of  a  simple  example  we 
11 Justrate  the  work  of  Irene  Greif  (7)  on  relating  the 
different  ways  of  interpreting  a  recursive  definition  and  the 
corresponding  proof  techniques  . 

Consider  the  following  definition  of  a  function  f  over 
the  nonnegative  integers: 

f(m,n)  if  n  -  0  then  m  else  f (m  +  1,  n  -  1) 

^!„reader  should  convince  himself  that  f(m,  n)  =  m  +  n.)  The 

at.and  m°St  obvlous  interpretation  of  the  definition  is 

is^o^es^fo?  ?S-an  al|orith";  for  computing  f.  The  algorithm 
1S  ,  b®st  for  n  -  °f  if  n  =  0  then  f(m,  n)  =  m;  otherwise 

apply  the  same  algorithm  in  computing  f(m  +  1,  n  -  1)  to  obtain 

the  result.  A  second  interpretation  depends  on  the  existence 
o  an  ordering  on  the  domain  of  the  function.  In  this  case 
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the  pairs  of  integers  (m,n)  ran  be  ordered  as  follows: 

(m^  ,  n^)  (^2  1  n2  ^ 

if  and  only  if 

n!  <  n2 ‘ 

Then  the  definition  of  f  is  an  inductive  definition.  The  base 
of  the  definition  is: 

For  all  m  f (m,  0)  =  m. 

The  induction  step  is: 

f(m,  n)  =  f (m  +  1,  n  -  1). 

The  third  interpretation  of  f  is  as  the  minimal  fixpoint  of 
the  following  functional: 

£(X)  Xm.Xn.  i_f  n  =  0  then  m  else  X(m  +  1,  n  -  1) 

00  i 

It  can  be  shown  that  the  minimal  fixpoint  of  is  II  £  (SI) 

i=0  . 

where  Si  is  the  function  that  is  everywhere  undefined  and  (X) 
means  the  function  produced  by  i  applications  of  £  to  X. 

Notice  that  £(.l)  =  Xm.Xn.  if  n  =  0  then  m  else  Si  (m  +  1,  n  -  1) 
is  the  function  which  is  m  for  (m,  0l  and  undefined  for  all 
other  ordered  pairs.  (Si)  has  the  value  m  for  the  ordered 

pair  (m,  0)  and  m  +  1  for  the  ordered  pair  (m,  1)  and  is 
otherwise  undefined.  Proceeding  in  this  manner,  the  function 
f  which  we  are  expecting  will  be  generated. 

The  last  interpretation  is  that  the  function  f  represents 
the  agreement  of  its  "truncations."  These  truncations  are  the 
partial  functions  defined  as  follows: 

f  ^  (m,  n)  =  i_fn  =  0  then  m  else  f (m  +  1  <  n  "  D  • 

The  reader  should  note  that  in  this  case 
f  i  (m,  n)  =  (J1  (1)  (nr. ,  n)  . 

Now  we  will  give  four  different  proofs  of  the  following 
simple  fact: 

f(m  +  1,  n)  =  f(m,  n)  +  1. 

The  first,  by  recursive  induction ,  corresponds  to  the  notion  of 
definition  by  algorithm.  We  show  that  f (m  +  1 ,  n)  and  f(m,  n)+l 
can  be  computed  by  exactly  the  same  algorithm  by  showing  that 
they  can  be  expressed  in  the  same  form,  namely: 


37 


COMPUTATION  STRUCTURES 


X(m,  n)  =  i£  n  =  0  then  m  +  1  else  X(m  +  1,  n  -  1) 

1 .  gx  (m,  n)  =  f  (m  +  1 ,  n) 

=  i_f  n  =  0  1  :  eui  m  +  1  else  f  (m  +  2 ,  n  -  1 ) 

=  if  n  -  0  then  m  +  1  else  (m  +  1 ,  n  -  1 ) 

2 .  qj(m,  n)  =  f(m,  n]  +  1 

=  (i^f  n  =  0  then  m  else  f  (m  +  1,  n  -  1)  )  +1 
=  if_  n  =  0  then  m  +  1  else  f  (m  +  1,  n  -  1)  +1 

=  i_f  n  =  0  then  m  +  1  else  g,,  (m  +  1,  n  -  1) 

This  shows  that  g^  =  g2  on  the  domain  of  X.  If  we  are  trying 
to  prove  g^^  =  g2  for  the  pairs  of  nonnegative  integers,  a  separ¬ 
ate  proof  about  the  domain  of  X  will  be  required. 

Another  proof  can  be  written,  utilizing  the  partial  order¬ 
ing  on  the  domain  of  these  functions,  and  the  inductive  defin¬ 
ition.  The  basis  of  this  proof  by  structural  induction  is: 

for  all  m 

f (m  t  1,  0]  =  if  0  =  0  then  m  +  1  else  f (m  +  2,  0  -  1) 

=  m  +  1 

f(m,  0)  +  1  =  if  0  =  0  then  m  +  1  else  f  (m+1 ,  0-1)  +  1 
=  m  +  1 

Therefore,  for  the  minimal  element  in  the  domain, 

f(m  +  1,  n)  =  f(m,  n)  +  1.  The  induction  step,  for  (m,  n)  , 

n  f  0  is: 

Assume  for  (m,  n) ,  n  <  N  that  f  (m  +  1 ,  n)  =  f(m.  n)  +  1 

1.  f(m  +  1,  N)  =  f(m  +  2,  N  -  1) 

2.  f  (m,  N)  +  1  *  f(m  +  1,  N  -  1)  +  1 

=f(m+2,N-l)by  induction  since  N-l  <  N. 

The  initial  assumption,  based  on  the  means  of  definition  of  the 
function  is  that  f  is  total  on  the  ordered  pairs,  partially 

ordered  by  ) .  From  this  fact  and  the  above  proof,  we  know 

that  f(m  +  1,  n)  =  f(m,  n)  +  1  for  all  pairs  of  nonnegative 
integers . 
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The  third  proof  is  actually  simple  induction  on  the  depth 
of  recursion  of  a  computation.  In  terms  of  the  definition  of 
the  minimal  fixpoint 

f  =--  U  C1^ » 

i=°° 

computational  (or  p-rule)  induction  is  simple  induction  on  i. 

1.  for  i  =  0  we  must  show 

R  (m  +  1,  n)  =  R(m,  n)  +1 
Obviously  both  are  totally  undefined. 

2.  Assume  X(m  +  1,  n)  =  X(m,  n)  +  1 

then  prove  £(X)  (m  +  1,  N)  =  £(X)  (m,  n)  +  1 

CM  (m  +  1,  n)  =  if.  n  =  0  then  m+1  else  X(m+2,  n-1) 

=  i_f  n  =  0  then  m+1  else  X(m+1,  n-1)  +  1 

(by  induction) 

=  (if  n  =  0  then  m+1  else  X(m+1,  n-1)  )+l 
=  CM  n)  +  1 

This  proves  that  f(m,  n)  =  f(m,  n)  +1  are  totally  equivalent, 
i.e.,  either  both  are  undefined  or  both  are  defined  and  have  the 
same  value. 

A  separate  argument  can  easily  be  given  to  show  that  both 
functions  are  defined  for  all  pairs  of  nonnegative  integers. 

The  last  proof  technique  is  very  similar  to  computational 
induction,  being  course-of- values  induction  on  the  index  i  of 
the  truncations  of  a  function.  This  amounts  to  doing  course-of 
values  induction  on  the  depth  of  recursion.  For  our  particular 
example,  in  which  equivalence  depends  only  ore  one  step  in  the 
computation  of  the  fixpoint,  the  difference  3  tween  the  two 
proofs  is  strictly  a  matter  of  formalism.  Wr  t rove  that  for 
i  =  0,  fQ(m  +  1,  n)  =  fp (m,  n)  +  1. 

Then  for  i  ^  0: 

assume  for  j  <  i,  f ^ (m  +  1,  n)  =  f ^ (m,  n)  +  1 

fi(m  +  1,  n)  =  if  n  =  0  then  m+1  else  f^_1(m+2,  n-1) 

=  if.  n  =  0  then  m+1  else  f^_^(m+l,  n-l)+l 

=  (if^  n  =  0  then  m+1  else  f^_^(m+l,  n-1)  )+l 
=  fi(m,  n)  +  1 


39 


COMPUTATION  STRUCTURES 


As  in  the  last  proof,  this  shows  strong  equivalence,  this  time 
by  truncation  induction . 

Generally,  any  method  can  be  used  for  a  proof.  If  the 
programmer  had  ore  of  these  interpretations  in  mind  in  writing 
his  program,  then  the  corresponding  proof  technique  will 
probably  seem  most  natural.  Ideally  an  automatic  program 
verifier  would  be  flexible  with  respect  to  choice  of  induction 
rule.  It  is  unlikely,  however,  that  all  of  these  will  be 
equivalently  useful  in  mechanical  proofs,  even  though  there  seems 
to  be  no  real  difference  in  scope  of  application  among  them. 

E.  A  Computer  for  General  Data  Types 

One  goal  in  the  design  of  programming  systems  is  to  retain 
the  generality  of  an  algorithm  when  it  is  encoded  into  the 
language  of  the  programming  system.  A  serious  limitation  on  the 
generality  readily  achieved  in  contemporary  computer  systems  is 
imposed  by  the  fixed  word  length  and  finite  size  of  computer 
memories . 

In  preparing  a  program  for  execution  by  a  computer  system, 
the  programmer  first  imagines  the  abstract  function  the  program 
is  to  implement.  Simple  examples  might  be  to  implement  the 
scalar  product  of  any  two  n-component  vectors  of  real  numbers, 
or  to  obtain  the  greatest  common  divisor  of  two  integers.  As 
in  these  examples,  the  abstract  function  almost  always  has  an 
infinite  domain.  Then  the  programmer  conceives  of  an  algorithm 
for  the  function  —  a  step-by-step  process  for  obtaining  the  value 
of  the  function  through  the  use  of  idealized  primitive  operations 
such  as  the  arithmetic  operations  on  integers  and  reals.  The 
next  step  is  to  express  the  algorithm  in  the  language  of  some 
practical  programming  system.  Usually  the  actual  data  types 
of  the  programming  system  have  their  idealized  counterparts, 
and,  if  the  language  is  suited  to  the  needs  of  the  algorithm, 
the  algorithm  may  be  converted  into  a  program  with  little 
difficulty.  Our  problem  of  generality  would  be  solved  if  the 
task  of  the  programmer  were  completed  at  this  point.  However, 
he  must  now  check  whether  the  word  size  and  finite  memory  size 
of  the  computer  system,  as  reflected  in  defects  of  the  primitive 
operations  of  the  programming  language,  may  prevent  correct 
operation  of  his  program.  In  many  cases,  the  program  will 
operate  correctly  for  a  large  (but  finite)  number  of  points  in 
the  domain  of  the  abstract  function,  and  will  fail  (often  with¬ 
out  any  hint  to  the  user)  for  the  remaining  (infinite)  set  of 
domain  points.  In  other  cases  the  programmer  will  find  that 
the  number  of  cases  for  which  the  program  will  work  correctly 
is  too  small  to  be  of  interest  and  a  new  approach,  using  a 
language  less  suited  to  expressing  the  algorithm,  or  less 
efficient  in  execution,  must  be  adopted. 

The  ability  of  a  programming  system  to  correctly  execute 
programs  expressed  in  terms  of  idealized  data  types  is  called 
generality  wi th  respect  to  domain .  Most  programming  systems 
fail  to  be  general  with  respect  to  domain  by  limiting  the 
amount  of  storage  that  may  be  allocated  to  one  data  value  to 
less  than  the  available  memory  of  the  computer  on  which  the 
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programming  system  runs.  For  instance,  integers  are  usually 
limited  in  value  by  the  number  of  bits  in  one  memory  word,  and 
the  maximum  range  of  an  array  subscript  must  often  be  specified 
at  the  moment  the  array  is  created. 

Since  the  memory  of  any  practical  computer  system  is,  in 
face,  finite  we  cannot  expect  any  program  to  obtain  the  value  of 
the  programmer's  abstract  function  for  any  point  in  its  domain. 
However,  we  should  expect  a  programming  system  to  produce  the 
correct  result  unless  the  computer  system  runs  out  of  memory 
in  trying.  (If  the  computer  system  runs  out  of  memory,  should 
one  blame  the  program  for  the  absence  of  sufficient  memory  to 
compute  the  function  ?)  This  consideration  is  the  basis  for 
the  following  definitions: 

Definition :  A  program  p,  with  input  variables  x  =  (x^,  ...,  x^) 

and  output  variables  y  =  (y^,  ...,  y^) ,  computes  a  function 

f  over  domain  D  if  and  only  if  for  each  point  x  in  D  either 

1.  program  p  produces  output  y  from  input  x  where 
y  =  f (x) ,  or 

2.  for  input  x  program  p  fails  to  complete  due  to  an 
unsatisfied  request  for  additional  storage. 

Thus  a  program  that  computes  a  functior  must  obtain  the  correct 
result  whenever  it  is  given  sufficient  resources  to  operate. 

Definition :  A  programming  system  that  implements  a  language  L 

is  general  with  respect  to  domain  if  and  only  if  for  any 
algorithm  that  defines  a- Function  f  on  domain  D,  the 
corresponding  program  in  L  computes  f  on  D. 

The  heart  of  the  problem  of  implementing  programming 
systems  having  generality  with  respect  to  domain  is  machine 
instructions  which  themselves  are  programs  not  general  with 
respei.t  to  domain.  The  basic  arithmetic  instructions,  for 
example,  usually  operate  on  representations  that  occupy  a 
single  register.  Since  conventional  programmed  multiple  length 
arithmetic  introduces  a  high  cost  in  time  consumed,  even  for 
quantities  that  require  only  single-length  representation, 
achieving  generality  for  these  data  types  in  a  conventional 
computer  system  is  unattractive. 

Peter  Bishop  (3)  has  designed  an  abstract  computer  in 
which  generality  with  respect  to  domain  is  achieved  for  a  large 
class  of  data  types  including  integers,  floating  point  numbers, 
strings  and  arrays,  as  well  as  more  elaborate  structures.  In 
the  abstract  computer,  each  data  value  is  represented  by  a 
pointer-linked  tree  structure  having  as  many  elements  as 
necessary  to  represent  the  value.  The  representation  of  any 
quantity  may  expand  arbitrarily  as  required  until  available 
memory  is  exhausted. 
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A.  Progress  Report 
1 •  Introduction 

ering  ways  t0SmakemengineerinqGof UP  co!?cen!:rates  upon  discov- 
more  methodical.  Its^cnroarh  complex  information  systems 
to  the  more  theoretical^ti-nci,  ®xPeriIT>ental,  in  contrast 
Structures  Group  ConJinSinq  .o  by  the  Computation 

as  a  laboratory?  significan^work'wL  ^  Multics  system 

memory  management,  networkina  novf  Performed  in  multi-level 

tection  mechanisms.  AnotSer'focus  of ™deli^  -  a"d  Pac¬ 
ing  to  move  the  system  to  modern  h  =  j  attentlon  was  prepar- 
mont,  operation,  and  maintenance  Sf  the^'  /outine  develop- 
handled  by  the  MIT  Tnforn,f?  £  the  system  were  largely 
Honeywell:  Information  Processing  Center  and 

than^pre vious ly Ifthf MuUicfs  ^  m°re  exPerimentation 
tional  control  of  others,  members  of  thp0^'6  Under  the  °Pera- 
students,  have  become  able  5!  f  thf  Group'  especially 

areas  as 'models  of  system  performance  themselve=  to  such 
the  like.  m  the  Computer  Netrorm;ean^rUm?rtati°n '  and 
with  making  use  of  the  exi^tinc  area  as  well,  concern 
mentation  has  arisen,  although  imi  f™3.  study  and  experi- 

completely  satisfactory.  This  ^en^  15  Sti11  not 

and  building  of  systems  t™  n  re^d  fway  from  the  design 
also  seen  in  ?he GroU  1 ”a^S1S  ■  and  exPloitation  is 
Programming.  Here,  the  focusisM^  10  sdPPort  of  Automatic 
"hospitable"  environments.  th  rapld  engineering  of 

»lued“S  5„h°„:;tLy<>Lr'p“rr”" 

Which  describes  the  inLrL?  f*  Z  0i:ganlck-  The  book 
should  be  of  maior  assistanc  . .  ru‘rture ,  °f  the  Multics  system 
issues.  An  effort  i  n "fV"  des™ating  the  key  design 
publish  the  book  in  Japanese?^™37  ln  Japan  t0  translate  and 

2‘  Multilevel  Storage  Management 

sod  in  some  l 

the  Group  is  the  instrumental nn  It ' ma;)or  interest  of 
the  multilevel  memory  system  ^f  M^r  experimentation  with 
ties  were  introducing  t£e SeVeral  new  facili' 
experimentation.  a  m  or  n  TrV' SOr  to  suPP°rt 

with  the  installation  of  a  multilevel  dlrection  was  taken 
in  addition  to  the  usual  aui-omru- • evel  Pagmg  strategy  which, 
ments  between  cor!  ad  r  management  of  page  move- 

tion  of  pages  between  drum ^nd'disf  ^pJgLT3905  the  migra‘ 
disk  to  drum  on  cicti  vat*  -i  nn  j  *  ^ges  are  moved  from 
migration  from  drum  to  disk  a"  aa  -RU  al9orithm  governs  the 
kind  of  associative  memory  7he  TnC'C  d^m  becomes  a 
loosely  coupled  LRU  algorithms^t  dff“Ctl?n1betWeen  the  two 
being  studied  in  detail?  different  levels  is  now 

paging "strategy "opened  ClCfor  7^  ^  ^  multil®vel 
management  which  trades  space' for  time^  Tn"^6^  ln  drUm 
latency,  -ultiple  copies  of  p„e,  are 


Preceding  page  blank 
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Currently,  two  copies  are  written,  giving  rise  to  the  name 
'2-fold  drum  manager",  but  further  experiments  are  possible 
with  the  existing  software  tc  •  iigate  the  characteristics 
of  a  4-fold  or  for  that  mat  •  n-fold  drum  manager.  As 

with  multilevel  paging,  2-folo  manager  has  proven  to  be 

a  practical  success  in  increasing  system  effectiveness,  in 
addition  to  its  experimental  interest. 

Another  new  strategy  of  practical  as  well  as  experimental 
interest  was  proposed  and  implemented,  although  not  yet  in¬ 
stalled,  in  disk  management.  Referred  to  as  "pre-seeking", 
this  strategy  entails  having  the  disk  DIM  determine  whether 
the  seek-portions  of  pending  requests  can  be  overlapped  with 
data  transfers.  This  work  evolved  from  Master's  thesis 
research  on  the  modeling  of  algorithms  for  moveable-head 
storage  devices.  Although  pre-seeking  is  an  old  idea  in  rerd- 
wnte  type  file  systems,  we  view  it  as  the  next  step  in  the 
exploitation  of  single  strategies  matched  to  demand  paqinq 
environments. 

Neither  the  n-fold  drum  manager  nor  the  disk  pre-seek  strategy 
is  thought  to  be  a  unique  approach,  but  in  conjunction  with 
multilevel  paging  strategy  they  offer  a  rich  environment  for 
further  experimentation  in  the  area  of  multilevel  storage 
management.  To  offer  a  standard  of  comparison  for  experiments 
a  benchmark  load  is  being  developed.  Although  one  might 
have  expected  a  benchmark  load  to  be  among  the  earlier  of  pro¬ 
jects  ,  in  fact  it  is  only  now  that  enough  information  has 
been  collected  about  the  ways  a  Multics— type  system  is  used? 
thus  construction  of  a  realistic  benchmark  can  now  proceed. ' 

A  paper  by  Prof.  J.  H.  Saltzer  (still  in  draft)  has  been 
written  on  a  simple  model  of  demand  paging,  which  is  based  on 
the  experimental  observation  that  over  a  wide  region,  the 
mean  number  of  memory  references  between  paging  exceptions 
roughly  increases  linearly  with  the  size  of  the  paging  memory. 
The  resulting  model  is  easy  to  manipulate,  and  is  applicable 
to  such  diverse  problems  as  choosing  an  optimum  size  for  a 
paging  memory,  arranging  for  reproducible  memory  usage  charges 
and  estimating  the  amount  of  core  memory  sharing.  The  model 
has  already  served  as  the  basis  for  an  implementation  on 
Multics  of  an  accounting  scheme  which  allows  for  charging 
memory  utilization  independent  of  system  configuration  and 
system  load. 

3.  ARPA  Network 

Considerable  progress  has  been  made  in  the  Multics  ARPA  Net¬ 
work  implementation.  At  the  beginning  of  the  reporting  per¬ 
iod,  it  was  possible  on  a  demonstration  basis  to  login  to 
Multics  from  Multics  over  the  Network.  By  the  end  of  the 
reporting  period,  the  Network  was  a  standard  feature  of 
Multics.  Network  logins  on  a  supported,  "sampling"  project 
were  on  the  order  of  half  a  dozen  a  day,  and  there  was  at 
least  one  paying  customer  of  the  system  on  the  West  Coast  and 
one  at  the  National  Bureau  of  Standards.  The  originally  high 
cost  of  Network  use  of  Multics  has  been  coming  down  drastically 
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The  target  is  for  use  of  Multics  via  the  Network  to  be  no  more 
expensive  than  from  local  teletypewriters.  As  the  basic 
machinery  comes  under  control,  the  Group's  Network  team  will 
pay  greater  attention  to  participating  in  the  design  of  Net¬ 
work  Graphics  and  File  Transfer  protocols. 

4 .  Performance  Model 

The  doctoral  thesis  mentioned  in  last  year's  report  is  being 
completed.  In  this  thesis,  a  set  of  hierarchically  organized 
analytical  models  has  been  developed  to  evaluate  the  perfor¬ 
mance  of  multiprogrammed  time-shared  computer  systems  using 
demand  paging.  These  models  are  capable  of  p -..dieting  the 
throughput  and  response  time  characteristics  of  such  systems, 
as  a  function  of  system  hardware/software  configuration  as 
well  as  of  the  characteristics  of  terminal  users  and  their 
programs.  These  models  are  then  used  in  optimizing  the  sys¬ 
tem  performance  and  deriving  the  best  system  configuration. 

The  system  performance  predicted  by  these  models  is  compared 
with  that  of  an  actual  computer  system,  i.e.,  Multics,  in 
order  to  examine  the  usability  of  these  models  as  a  design 
aid. 


5 .  Protection  of  Programs  and  Data 

With  the  opportunity  for  use,  it  has  become  apparent  that  the 
original  Multics  access  control  mechanism  present  an  inter¬ 
face  which  is  too  complex  and  confusing  even  for  expert  users. 
Since  confusion  leads  to  misuse,  and  misuse  to  lack  of  the 
desired  control  of  access,  we  have  here  a  significant  defect. 

As  a  result,  a  minor  interface  redesign  was  undertaken.  The 
changes,  when  implementation  is  completed  shortly,  will  simpli¬ 
fy  and  clarify  the  use  of  these  mechanisms,  making  their 
application  to  user  protection  problems  more  apparent  to  users. 
The  potentially  more  far-reaching  step  was  the  evolution  of  a 
detailed  plan  for  allowing  all  users  to  define  protected  sub¬ 
systems  and  share  them  with  one  another.  The  proposed 
facility  would  allow  groups  of  programs  and  data  segments  to 
be  encapsulated  and  shared,  potentially  with  any  system  user, 
in  such  a  way  that  access  of  the  borrowing  user  would  be  re¬ 
stricted  to  calling  "gate"  entry  points.  This  scheme  seems 
to  utilize  the  full  functional  capabilities  of  the  ring  pro¬ 
tection  hardware  in  the  follow-on  processor.  The  plan  will 
be  reported  on  in  greater  detail  when  it  is  implemented. 

Finally,  a  thesis  on  protection  referred  to  in  last  year's 
report  is  almost  completed.  Thif,  thesis  describes  practical 
protection  mechanisms  that  allow  mutually  suspicious  subsys¬ 
tem.'.:  to  cooperate  in  a  single  computation,  a  case  which  is  be¬ 
yond  the  functional  capability  of  protection  rings.  The  mech¬ 
anisms  are  based  on  an  extension  of  the  domain  model  of  pro¬ 
tection.  This  extension  makes  explicit  provision  for  communi¬ 
cating  arguments  between  domains  when  the  execution  point  of 
a  computation  passes  from  one  domain  to  another.  The  extended 
domain  model  serves  as  the  basis  for  the  design  of  a  hardware 
processor  which  automatically  enforces  the  complex  access 
constraints  associated  with  general  multi-domain  computations. 
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mentsPtoCchIngeaSeWdomaiiaofaIxecutiontinA  ^  argu_ 
domains  1thatII'normally^have ^“access1  ° 

The  processor,  when  supported  L°bt  f^5  in  common  ■ 

specifying  the  oro ?  ?Y  suitable  software  for 

cooperating,  mutually  suspicious°sub^P% t0  be  enforced'  allows 
efficiently  and  naturally*^ = ubfystems  to  be  implemented 
points  out  a  direction  in  which  a  mu^f  ^illty‘  The  thesis 
evolve  to  support  applications  wLr-1 tl-llke  system  could 
straints  are  required  than  can  f!°re,?PleX  access  con" 
oased  on  concentric  rings  of  protection?6  ^  3  mechanism 

6-  Follow-On  Hardware 

sJab^r^ipment^ed  ^fsT  ^  l°r  Multics  on  modern, 

the  M .  I .  t .  informatioJ  P^ceIs?nanLnf  *  CO"traCt  bet'^" 

the  reporting  period  for  follow-on  Multic^h  H°neyweli  during 
be  based  upon  the  Honeywell  finnn  MVltlc^>  hardware  which  will 
follow-on  machine  JlTlTell  essential  ,tachnol^y.  The 
the  Honeywell  6080  as  the  645  does  to^h^c  ®ajne,  relation  to 
primary  differences  are  th«  9  to  the  635»  where  the 
hardware  and  an  associative  mem^6000  of  address  appending 
(The  6080  is  roughly  three  tiitip^f  °t*  tbe  Mu3tics  machine. 
Although  some  pifces  L  6  faSter  than  the  635-> 
of  the  equipment  on-site,  most 

the  Fall  of  1972.  The  inteby  ^“le  fc°  be  delivered  during 
is  to  minimize  differences  ’-et-we  b  ik  hardware  and  software 
however,  certain  new  feature-’  n^w  and  old  systems; 

which  will  carry  a  high  pavoff  fL?1  f  ln  both  areas 
tion.  In  the  hardware,  a  modified  nnfnf  ^  Sma11  alfcera- 
supports  the  Multics  protection  7  register  structure 

performance  drum  is  replaced  b?  hn?v  mechanism;  the  high 
of  general  registers  (long  felt  L'  3ge;  and  the  "umber 
current  machine)  will  be  increLJd  in  ^nstraint  the 
more  efficient  call-sa're-rpFn™  d'  In  the  software,  new, 
response  to  the  metering  obserCatiS^th^ introduced  in 
routine  calls  on  Multics  is  auiTe  h?  bhat  uh®  nujnber  of  sub¬ 
software  which  manages  the  p?ote?ti7nh  ’’  •  he  bUlk  of  the 
removed,  in  view  of  the  hardware  rln9  mechanism  will  be 

compiler  will  take  advance ^  of  the  SoK^''  ^  the  PL/1 
Instruction  Set  to  perform  tl?e  6080.s  new  Extended 

?ff1CtentiY’  R°Ugh  estimates  indicate ^hat  'Tanipulation  more 
effects  of  new  hardware  and  f  that  fcnc  combined 

three6 to1sevenf°rmanCe  4" 

transition  effort, 

ware  and,  to  at  least  an  ^  en9i"eering  of  both  soft¬ 

ware.  During  the  year?  the  st?fte?°n?eptUa7 6Xtent '  hard" 
from  the  old  system  to  the  new  was  planned3- the  transibion 

development  s?f??m  ^^been  “^nJi 1  f  thf  ^^'^h^curren^ 
the  Service  system  does)  but  with  theV^Sn^Ue?00  (3S 
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and  communications  computer  of  the  follow-on. 
7 .  Maintenance  of  Multics 


noted  above,  normal  development,  operation,  and  maintenance 
of  Multics  have  devolved  upon  the  M.l.T.  Information  Process¬ 
ing  Center  and  Honeywell.  It  is  significant  that  a  new 
Multics  site  was  brought  into  existence  during  the  year  by 
Honeywell  personnel  in  Paris,  France.  Compaigne  Honeywell 
Bull  is  using  this  system  as  a  'software  laboratory",  in 
?Su'|U£Ction  with  a  similar  facility  in  Waltham,  Massachusetts. 
(The  fourth  645-based  Multics  site  is  at  Rome  Air  Development 
Center,  New  York.)  Although  occasional  bursts  of  help  from 
CSR  personnel  are  required  on  very  hard  problems  in  certain 
areas,  the  successful  day-to-day  operation  of  four  separate 
Multics  sj  is  speaks  well  of  the  successful  transfer  of 
expertise  as  well  as  responsibility  to  Honeywell. 

8 .  MPM  Upgrade 


Experience  with  the  ARPA  Network  has  strongly  underscored  the 
importance  of  user  documentation.  Both  our  experience  with 
attempting  to  learn  to  use  other  systems  and  reports 
by  Network  participants  from  other  sites  on  their  attempts  to 
learn  to  use  Multics  suggest  that  the  problem  of  teaching-at- 
a-oistance  is  far  from  solved.  The  necessity  of  furnishing  a 
solid  foundation  for  learning  in  the  form  of  documentation 
appears  to  be  inescapable.  A  concerted  effort  to  both  upgrade 
the  quality  and  complete  the  contents  of  the  Multics  Program¬ 
mers  Manual  was,  then,  probably  the  most  important  con¬ 
tribution  of  the  Group  to  making  the  system  easy  to  use  durinq 
the  reporting  period.  As  the  MPM  is  the  primary  source  for 
disseminating  knowledge  about  the  system,  improvements  in  its 
quality  serve  a  useful  purpose  for  both  users  and  students  of 
the  system.  Particularly  noteworthy  from  the  user's  point  of 
view  are  the  additions  of  a  rather  extensive  "Beginners'  Guide" 
and  an  index.  Several  new  Reference  Data  Sections  have  been 
produced,  as  well  as  many  new  command  and  subroutine  writeups. 

9 •  Programming  Languages 

Significant  work  on  several  programming  languages  was  also 
performed.  Although  only  initial  steps  were  taken  during  the 
reporting  period,  an  upgrade  of  the  LISP  implementation  is  of 
particular  interest  because  of  its  impact  on  the  implementa¬ 
tion  of  the  Automatic  Programming  project.  (See  Future  Plans 
for  more  information  on  this  project.)  The  effort  is  being 
performed  jointly  with  Automatic  Programming  personnel,  and 
is  the  first  step  taken  in  the  Group's  collaboration  in  that 
area. 


An  experimental  version  of  APL  was  developed  by  Honeywell  with 
assistance  from  a  Computer  Systems  Research  Group  student. 
Although  it  is  only  an  initial  implementation,  it  has  created 
considerable  interest  in  the  ARPA  Network  community  as  it  is 
the  only  APL  known  to  be  available  on  the  Network.  Its  inter¬ 
face  to  the  user  has  been  constructed  to  be  exactly  the  same 
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as  the  IBM  APL  --  a  construction  which  most  APL  enthusiasts 
consider  essential.  A  plan  for  improving  its  performance  has 
been  evolved,  which  it  is  hoped  will  be  implemented  this 
summer. 

Work  at  Honeywell  is  nearly  complete  on  "Version  II"  PL/I  and 
FORTRAN.  The  PL/I  is  ANSI  standard,  and  offers  superior  per¬ 
formance  as  well  as  ability  to  make  use  of  the  capabilities  of 
the  follow-on  hardware  (which  contains  an  extended  instruction 
set  to  facilitate  character  manipulation).  It  is  interesting 
to  note  that  the  Fortran  compiler  shares  the  code  generator 
of  the  new  PL/I  compiler. 

An  XPL  compiler  implementation  was  completed  as  part  of  a 
Bachelor's  thesis.  This  language  is  of  interest  since  it  is 
the  vehicle  for  SPL,  a  PL/I  subset  language  which  is  used  in 
the  M.I.T.  introductory  programming  course.  The  languages 
are  based  on  the  work  of  McKeeman ,  Horning  and  Wortman  at 
Stanford  University  and  the  University  of  California  at  Santa 
Cruz . 

B.  Future  Plans 


In  the  next  twelve  months,  the  following  major  projects  are 
planned: 

-  Continued  support  of  Honeywell's  conversion  of  Multics 
to  the  645F  hardware  system.  This  activity  will  reach 
a  peak  in  Fall,  1972,  at  the  time  of  delivery  of  the 
645F  processor  and  memory,  and  continue  through  Spring 
of  1973,  when  the  conversion  is  scheduled  for  comple¬ 
tion.  Project  MAC  is  currently  providing  about  1/4 

of  the  manpower  for  the  conversion  activity.  Develop¬ 
ment,  with  the  Automatic  Programming  group,  of  a  LISP 
interpreter  and  compiler  system  on  Multics.  This  work 
has  two  goals: 

1.  A  language  essentially  identical  to  the  LISP  used  on 
the  MAC  and  Artificial  Intelligence  Laboratory's 

P DP-10 's  . 

2.  A  compiler  which  produces  the  highest  quality  object 
code  possible  for  the  645  follow-on  processor.  The 
combination  of  an  instruction  execution  rate  in 
excess  of  106  instructions/second,  a  384K  word  core 
memory,  and  a  virtual  memory,  should  make  this  com¬ 
piler  a  very  potent  tool. 

-  Completion  of  the  Multics  Programmers'  Manual  (MPM)  ana 
the  System  Programmers'  Supplement  (SPS)  to  the  MPM. 
These  two  books  are  both  about  3/4  complete,  and  a  con¬ 
certed  effort  to  finish  them  is  underway.  Arrangements 
have  been  made  with  Honeywell's  publications  office  to 
take  over  editing,  updating,  and  publication  of  these 
two  manuals  as  soon  as  they  are  substantially  com¬ 
plete.  Current  schedules  call  for  the  MPM  to  be  avail¬ 
able  from  Honeywell  in  first  quarter  of  1973.  The  SPS 
will  come  later. 
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A.  INTRODUCTION 

^h'i'S  year  has  brought  almost  to  culmination  the  joint 
wmputer-system  research  and  development  effort  of  the  Dynamic 
Modeling  Group,  the  Computer  Graphics  Group,  and  the  part  of 
the  Computer  Networks  Group  based  on  the  PDP-10  computer. 

■  ®  br°ught  into  being  a  rapidly  responsive,  highly 

interactive  time-sharing  system  with  sophisticated  graphic9 
dtspiay,  good  connection  to  the  ARPA  Network,  and  unusually 
well  developed  facilities  for  using  and  augmenting  through  use 

the  twn-p  S£a5^ble  Procedures  and  data  sets.  This  summer, 
the  two  and-a-half  groups  are  beginning  a  transition  from 

tTitUwf^iSySt?m'!?U^ding  t0  rcsearch  in  automatic  programming 
that  will  exploit  the  computer  system.  Final  integration  of 

several  parts  of  the  system  and  the  shift  into  automatic- 
programming  research  will  continue  through  the  fall,  and  most 

_  =^hS  °f  idaa‘?  tested  and  experience  qainsd  in  the 

system-building  effort  will  be  done  during  the  fall  and  winter 
It  is  possible  now,  nevertheless,  to  present  a  description  of 

tne(-h«mpUter  s^stem. and.  to  relate  several  aspects  of  its  design 
to  the  aims  and  aspirations  that  motivated  the  project.  y 

„n  Th®  bas  becn  callcd  the  "Dynamic  Modeling  Sys  .em" 

ref defPlte  efforts  to  promote  use  of  names  that 
reflect  the  participation  of  Computer  Graphics  and  Computer 
Networks  as  well  as  Dynamic  Modeling.  The  name  "Dynamic 
Modeling  System"  will  be  used  in  this  report. 

B.  MOTIVATION 

,  ^  The  motivation  behind  the  Dynamic  Modeling  System  had 

®everal  components.  in  a  general  way,  of  course, 

S  t lb  stemmed  from  the  drive  for  machine-aided  cognition 
that  motivated  so  much  of  computer  research  and  development 

dU5in?  ,th°  1960  s’  When  the  Dynamic  Modeling  System  was 
undertaken ,  however,  there  was  a  widespread  feeling  that  the 
thrust  of  the  1960's  had  fallen  short  in  several  ways.  Most 
time-sharing  systems  were  slow  to  respond  —  not  "hiqhlv 
interactive".  None  (we  know  or  know  of)  had  good  facilities 
tor  general-purpose  graphical  interaction.  The  most 
responsive  systems  and  the  ones  most  convenient  to  use  were 

™e"ian??ag°  systems  <e-9-  APL)  or  systems  with  two  or 
three  essentially  noncommunicating  language  subsystems.  And 
most  importantly,  nowhere  was  there  a  time-sharing  system  that 
had  passed  °r  seemed  on  the  threshold  of  amassing  a  larqe 
sharable ,  consistent,  coherent  collection  of  procedures  and 
sets  of  data  that  could  oe  retrieved  on-line  by  users  and 
conveniently  incorporated  into  their  own  programs.  The  concept 
of  a  large  and  coherent  run-time  library  had  been  about  for 
several  years  as  a  gleam  or  a  dream,  but  it  had  not  been 
approached  at  all  closely  in  actuality. 

Many  of  the  features  that  we  considered  desiderata  for 
the  Dynamic  Mode i! ng  System  had  been  implemented  in  one  time¬ 
haring  system  or  another  by  the  time  the  Dynamic  Modeling 
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System  was  undertaken.  (Work  on  the  Dynamic  Modeling  System 
began,  effectively,  in  October,  1969,  when  a  used  PDP-6 
computer  with  32K  words  of  memory  was  delivered  to  Project  MAC.) 
The  designers  of  Multics  had  solved  most  of  the  problems  that 
were  important  to  us  in  the  software-technical  area  of 
controlled  sharing  of  procedures  and  data.  The  Artificial 
Intelligence  Laboratory's  PDP-10/ITS  system  was  providing 
fast  and  convenient  interaction  (mainly  alphanumeric)  and  the 
myriad  benefits  of  the  LISP  language  with  its  options  of 
interpretation  and  compilation.  IBM’s  APL  was  demonstrating 
most  of  the  advantages  (and  some  of  the  disadvantages)  of 
working  interpretively  in  a  neatly  designed  language  and 
compact  notation.  The  Lincoln  Laboratory's  TX-2/Apex  Time¬ 
sharing  System  was  operating  with  time-shared  graphics  and 
was  testing  out  an  approach  (the  Reckoner)  to  coherence  in 
programming  and  systematic  sharing  of  programs.  In  the 
Augmentation  Research  Center  of  Stanford  Research  Institute, 
Engelbart's  On-Line  System  was  showing  how  effectively  a  well 
organized  multi-access  file  system  can  correlate  and  integrate 
the  activities  of  the  members  of  a  design  team.  And  there 
were,  indeed,  several  other  time-shared  computer  systems  that 
demonstrated  effectively  one  or  more  of  the  features  that  we 
considered  essential,  but  none  demonstrated  all  the  features. 

The  aspiration  for  the  Dynamic  Modeling  System  was  to  put  all 
the  desiderata  together  in  one  reasonably  efficient  system. 
Again,  the  most  important  design  desiderata  were: 

1.  Fast  response 

2.  Convenient  interaction 

3.  Well  developed  graphic  display 

4.  Where  and  when  needed,  the  flexibility  provided 
by  interpretation;  where  and  when  needed,  the 
efficiency  provided  by  compilation  or  assembly 

5.  Large,  coherent  run-time  library  of  sharable 
procedures  and  data  —  augmented  by  application- 
oriented  users  as  well  as  system  programmers 

C.  OVER-ALL  PLAN  OF  THE  DYNAMIC  MODELING  SYSTEM 


The  general  plan  of  the  Dynamic  Modeling  System  is  shown 
in  Fig.  1.  The  figure  shows  only  the  largest  features  of  the 
landscape.  They  consist,  of  course,  of  hardware  and  software 
—  of  consoles,  central  software,  central  hardware,  and 
interconnections . 

CONSOLES 


The  consoles  are  Imlac  PDS-l's,  Adage  Advanced  Remote 
Display  Stations  (ARDSs) ,  and  Adage-built  vector  generators 
and  displays  that  are  part  of  the  Evans  and  Sutherland  LDS-1 
Line  Drawing  System.  For  graphical  input  there  are  "mice", 
"joysticks",  and  one  stylus  tablet.  (More  stylus  tablets  are 
on  order.)  The  only  software  in  the  consoles  is  in  the  Imlac 
consoles,  which  include  minicomputers.  Most  of  the  software 
that  operates  in  the  Imlacs  was  provided  by  the  manufacturer, 
but  we  have  augmented  it  and,  on  a  larger  scale,  prepared 
PDP-10  software  that  takes  advantage  of  the  Imlac 's  impressive 
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capabilities  in  editing  and  graphic  display. 

CENTRAL  SOFTWARE 

The  great  preponderance  of  our  effort  has  been  devoted 
^S2°W"  1't°  work  at  levels  above  the  operating 

^yst^re.  !,e  iiave  tried  to  develop  a  system  of  facilities 

andeinto9theWrealmnof°UtWard  ffDir'  tHe  operatin9  system  toward 
ana  into  tne  realm  of  user  applications.  It  may  help  to 

MulticlUif  weUsav°thatfr°m  ^°Se/f  the  PrimarV  developers  of 
^uitics  it  we  say  that  we  adopted  an  already  developed 

necessary  fofour^  m°dified  only  insofar  as  absolutely 
cvstem  f  ^  purpose,  whereas  they  created  an  operating 

system  de  novo  devoting  most  of  their  resources  to  it  and  left 
large  part  to  various  subsystem  developers  in  th"  Multics 

!  thw  t3Sk  °f  creatin9  the  extensions  and 

adaptations  that  have  primarily  concerned  us.  In  this 

ArtifiHaV'/t  ffknowlGdge  a  great  debt  to  members  of  the 
Artificial  Intelligence  Laboratory  who  developed  the  ITS 

operating  system  and  were  extremely  helpful  in  transferrins  it 
to  us  and  tutoring  us  in  its  maintenance  and  use  9  ^ 

The  upper  tier  of  central  software  (Fia  1)  i  c  divide 

inflLni  d  d,  largely  antagonistic  philosophies  have 

b  fn°lr,r^'  ™eY  are  interfaced,  and  we  are  doing 

user  meld,the  two  into  a  functional  unity,  because 

use.  a  need  --  and  we  want  —  the  best  of  both  worlds  n,.t  u,o 
may  defer  the  philosophies.  Let  us  first  complete  our 
examination  of  the  over-all  plan.  P 

rrro*.  MUDDLE  is  the  part  of  the  Dynamic  Modeling  System  that  is 
mest  helpful  to  a  person  who  wants  to  formulate  and  explore 

ir  te„Sdeddtt0  t6St  thQm  °Ut  guickly  and  conveniently .  eX?t°is 

intended  to  oecome  in  addition,  for  many  applications  the 

f?ep  ali  ^hf  reft  °f  the  Dynamic  Modeling  System.  Whereas 

limited  to  the  single  data  structure  LIST,  MUDDLE 
offers  several  data  structures.  MUDD  E  has,  indeed  several 
c.her  areas  of  advantage  over  LISP  ar  appears  likely  to  serve 

?  a  follow  °"  to  LISP  and  as  a  basis  for  higher-level 
languages  such  as  PLANNER  and  CONNIVER. 

The  design  and  implementation  of  MUDDLE  have  been  (and 

?afr}?d  °Ut  aS  3  j0int  undertaking  of  the  M?l  T 
Artificial  Intelligence  Laboratory  and  Project  MAC. 

provide^orf w?ti  W°r^"  iS  3  SyStem  °f  Programs  intended  to 
provide  users  with  convenient  ways  of  carrying  out  most  of  the 

L”a 

p Ip™  ssifs*  11°^ 

£'£>  “cssfssi  ‘rMuco 

ieen  prepared  in  the  assembly  language  MIDAS.  It  is 
consistent  with  a  subset  of  PL/1.  It  emphasizes  a  smaU  set 
d  ta  typos  and  structures  compatible  with  those  of  MUDDLE 
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ARPANET 


Fig.  1 

General  Plon  of  the  DM  System  : 

The  heavy  lines  and  cross-hotching  indicate  the  moin  investments  of  effort 
m  the  system  on  the  parts  af  the  Dynamic  Modeling,  Computer  Graphics, 
and  Computer  Networks  Groups.  See  text  ond  other  figures  for  explication 
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but  admits  a  wider  range,  laying  down  conventions  and 
procedures  for  registering  data  types  and  structures.  It 
defines  several  classes  of  subroutines  and  a  preferred 
calling-and-returning  sequence  format,  but  it  is  hospitable 
to  subroutines  written  in  any  language  if  they  have  been 
translated  into  loadable,  callable,  and  executable  PDP-10  code. 

CALICO  subsumes  a  set  of  facility  programs  and  a  library 
of  modular  subprograms.  The  facility  programs  handle  the 
functions  shown  in  Fig.  2.  The  library  consists  of  about  500 
subroutines  (callable  entries) ,  each  with  documentation 
available  (but  vide  infra)  on-line  through  the  consoles  as  well 
as  in  print-out  form  in  files  near  the  consoles  Most  of  the 
effort  of  the  two-and-a-half  groups  has  gone  into  CALICO,  and 
it  must  be  said  at  the  present  time  to  be  the  main  part  of  the 
Dynamic  Modeling  System  created  by  the  effort. 

HYDRA:  As  shown  in  Fig.  1,  MUDDLE  and  CALICO  are  inter¬ 
connected.  MUDDLE  functions  can  call  subroutines  from 
CALICO'S  library  and  have  them  operate  on  data  that  have  been 
processed  by  MUDDLE,  and  --  although  this  is  less  useful  -- 
CALICO  subroutines  can  call  MUDDLE  functions  and  (if  the  data 
types  and  structures  are  among  those  dealt  with  by  MUDDLE) 
have  them  operate  on  data  that  have  been  processed  by  CALICO. 
The  interaction  between  MUDDLE  and  CALICO  is  at  present 
rather  inefficient  and  constrained,  but  it  is  rapidly  being 
made  more  efficient  and  less  constrained.  We  are  hopeful 
that,  within  a  few  months,  we  shall  have  in  operation  a  true 
realization  of  what  three  years  ago  we  envisioned  in  a  nebulous 
way  but  did  not  know  quite  how  to  achieve:  a  computer  system 
providing  both  (a)  the  convenience  and  flexibility  of 
interpretive  execution  in  the  upper  echelons  of  program 
hierarchies  and  in  any  other  areas  in  which  procedures  need 
to  be  readily  modifiable  and  (b)  the  power  and  efficiency  of 
assembly  or  compilation  in  all  those  parts  of  the  programs  in 
which  off-the-shelf  (i.e.,  out-of-the-library)  subprograms 
can  be  used. 

ITS:  The  operating  system  ITS,  developed  over  a  period 
of  years  by  members  of  the  Artificial  Intelligence  Laboratory, 
has  proven  to  be  excellent  for  our  purposes.  We  have  modified 
it  only  insofar  as  necessary  to  accommodate  our  hardware,  to 
permit  shared  use  of  pure  procedures  and  data,  and  to  support 
operation  of  the  Dynamic  Modeling  System's  PDP-10  as  part  of 
the  ARPA  Network.  It  is  important  to  note  that  ITS  permits 
each  user  to  have  several  processes,  organized  in  a 
hierarchy,  working  for  him  concurrently.  That  is  often  a 
great  convenience:  the  one-thing-at-a-time  work  style  forced 
by  single-process  operating  systems  is  not  natural  to  most 
people,  and  there  is  great  advantage  (as  in  debugging  a  faulty 
program  with  a  debugging  aid  such  as  DDT)  in  having  programs 
able  to  communicate  with  each  other  yet  not  able  to  destroy 
each  other. 

Network  Control  Program:  Partly  under  this  heading  and 
partly  under  "CALICO"  there  are  several  related  program  ,  that 
connect  the  Dynamic  Modeling  System  into  the  ARPA  Network. 

The  Network  Control  Program  proper,  the  Logger,  the 


it 
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implementation  of  the  TELNET  protocol,  and  an  implementation 
of  the  new  Data  and  File  Transfer  protocols  have  now  been 
brought  into  line  with  the  conventions  of  CALICO,  and  they 
consist  mainly  of  library  subprograms.  The  Network  Daemon 
(independent  ITS  process) ,  which  earlier  had  to  remain  active 
continuously,  now  "wakes  up"  whenever  it  is  called  and  "goes 
back  to  sleep"  when  it  is  finished. 

Independent  Modules ;  Not  integrated  with  CALICO  or 
MUDDLE  but  nevertheless  of  great  value  to  users  of  the  Dynamic 
Modeling  System  are  the  text  editor  TECO ,  the  debugging  aid 
DDT,  and  such  utility  programs  as  PEEK,  LOCK,  INFO,  and  TJ-6 
borrowed  with  appreciation  from  the  M.I.T.  Artificial 
Intelligence  Laboratory.  Not  integrated,  and  of  less  value  to 
users  because  of  it,  are  the  language  and  compiler  LISP, 
borrowed  with  appreciation  from  the  M.I.T.  Artificial 
Intelligence  Laboratory,  and  the  language  and  compiler  SAIL, 
borrowed  with  appreciation  from  the  Stanford  Artificial 
Intelligence  Laboratory.  It  will  be  very  difficult  to  merge 
either  LISP  or  SAIL  into  the  MUDDLE-CALICO  complex.  We  do 
not  see  much  to  be  gained  from  merging  LISP,  but  the  idea  of 
merging  SAIL  refuses  to  die  because  SAIL  would  bring  with  it 
access  to  a  host  of  published  ALGOL  algorithms. 

DEC  Software;  Last  year,  a  joint  MAC-AI  effort  developed 
a  program  that  makes  the  ITS  £_,  stem  look  to  the  Digital 
Equipment  Corporation's  software  like  the  DEC  PDP-10  operating 
system.  That  program  makes  available  to  us  the  whole  collection 
of  DEC  software,  including  FORTRAN,  but  does  not,  of  course, 
make  it  coherent  with  MUDDLE  or  CALICO. 

CENTRAL  HARDWARE 

The  hardware  base  of  the  Dynamic  Modeling  System  was 
described  in  the  Annual  Report  of  1970-71  and  will,  therefore, 
be  described  only  briefly  here.  The  hardware  base  includes: 

1  DEC  PDP-10  main  processor 

1  E&S  LDS-1  display  processor 

8  Blocks  of  core  memory  (208K  words) 

3  DEC  RP#2  disk  drives  (15M  words) 

1  DEC  TU20  magnetic-tape  unit  (9-track) 

8  DEC  555  microtape  units 

2  Bright  BI1215  line  printers 

1  Interface  to  ARPANET  IMP 

1  Interface  to  consoles  and  printers 

together  with  the  necessary  ports,  channels,  and  interconnec¬ 
tions.  Most  of  the  hardware  was  purchased  from  the  Digital 
Equipment  Corporation.  Some  was  purchased  from  other 
manufacturers.  The  ports  for  about  half  the  core  memory  and 
the  interfaces  to  the  IMP,  the  consoles,  and  the  printers  were 
constructed  in  the  laboratory. 

D.  OPPOSITION  AND  CONFLUENCE  OF  TWO  PHILOSOPHIES 


In  the  preceding  section,  we  mentioned  that  there  are 
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two  partly  antagonistic  philosophies  in  the  world  into  which 
we  are  bringing  the  Dynamic  Modeling  System.  It  is  to  a  large 
extent  the  product  of  their  attractions  and  counter  attractions, 
their  pullings  and  haulings. 

The  one  philosophy,  embodied  in  various  degrees  in  LISP, 
APL,  BASIC,  and  now  MUDDLE*,  prizes  the  power  and  convenience 
that  one  can  achieve  by  using  a  single,  internally  consistent 
language  that  provides  the  basic  operators  for  working  with  a 
restricted  set  of  basic  data  types  and  a  way  of  composing 
higher-level  operators  —  procedures,  functions,  or  subroutines 
—  and  accumulating  them  within  the  system.  Associated  with 
this  philosophy,  but  not  an  integral  part  of  it,  is  the  idea 
that  each  programmer-user  should  or  will  create  his  own, 
personal  system  of  procedures,  data  and  techniques,  and  that 
there  is  more  to  be  gained  through  facilitation  of  such 
individual  efforts  than  through  attempting  to  organize  one 
over-all  system  replete  with  standards,  conventions,  and  a 
central  software  library,  for  use  by,  and  to  be  contributed  to 
by,  an  entire  community  of  users. 

The  other  philosophy,  which  we  think  has  never  yet  been 
fully  and  successfully  embodied  in  any  actual  computer  system, 
focuses  upon  an  image  (which  may  be  quixotic,  yet  must  surely 
contain  the  germ  of  the  fundamental  plan  of  distant-future 
computer  systems)  in  which  most  of  the  procedures  that  users 
need  have  already  been  written,  tested,  debugged,  documented, 
and  cataloged  —  and  in  which  users  engage  themselves  more 
often,  and  more  productively,  in  retrieving  and  using 
procedures  than  in  creating  (or  recreating)  them.**  This 
philosophy  was  strong  among  developers  and  users  of  the 
Compatible  Time-Sharing  System,  the  files  of  which  at  one 
point  contained  one  to  two  million  words  of  public  programs 
and  20  to  30  million  words  of  private  but  to  some  extent 
sharable  programs.  However,  no  way  of  tightly  organizing  the 
CTSS  user  community  was  ever  worked  out,  and  although  there 
were  many  cross-linkages  among  CTSS  files,  it  must  be  said 
that  CTSS  only  defined  and  clarified  the  philosophy  and  did 
not  fully  realize  it.  The  philosophy  of  the  community-wide 
coherent  system  has  been  strong  in  Multics,  also,  but  —  as 
already  noted  —  most  of  the  resources  for  Multics 
development  went  into  providing  an  operational  basis  for 
sharing  rather  than  into  such  things  as  or  line  facilities  for 
retrieving  library  software.  At  present,  the  main  thrust  in 
the  Multics  world  toward  community-wide  coherence  is  that  of 
the  Cambridge  Project,  which  is  developing  a  Consistent  System 

***** 

*It  is  dangerous  to  put  these  names  into  such  proximity. 

The  four  languages/systems  are  different  from  one  another  in 
many  ways,  and  proponents  emphasize  differences.  Nevertheless, 
there  is  a  strong  common  theme.  Perhaps  it  is  embodied  more 
in  the  proponents  than  in  the  languages  themselves. 

**In  the  distant  future,  of  course,  users  may  describe  the 
programs  they  want  to  a  program-writing  program  rather  than  to 
a  program-retrieving  program.  Automatic  programming  is  to 
program  retrieval  as  the  calculation  of  functions  of  arguments 
is  to  table  look-up. 
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for  research  and  applications  in  the  behavioral  and  social 
sciences . 

Any  effort  to  achieve  community-wide  coherence  ;s  sure  to 
bring  more  than  one  language  into  the  picture.  It  is  more 
difficult  to  acl  ievc  coherence  across  languages  than  within 
one  language.  It  is  even  more  difficult  to  convert  a  BASIC 
fan  to  APL  (or  vice  versa)  or  to  get  an  old-time  FORTRAN  user 
out  of  FORTRAN  and  into  the  more  modern  world  of  PL/1  (or  even 
ALGOL)  .  Thus  there  arc  partly  antagonistic  technical  and 
social  forces  at  work  as  well  as  partly  antagonistic 
philosophies.  We  have  tried,  as  mentioned,  to  achieve  the 
best  of  both  worlds,  but  of  course  we  have  had  to  compromise 
--  for  system  engineering  is  almost  always  as  much  compromise 
as  breakthrough. 

To  keep  the  problem  within  reasonable  bounds,  we  defined 
a  community  of  programmer-users  much  smaller  than  the  Multics 
user  community  —  considerably  smaller  than  the  Cambridge 
Project's  behavioral  and  social-science  community  within 
Multics.  Sixty  users  have  permanent  files  in  the  Dynamic 
Modeling  System.  Although  the  group  includes  representatives 
from  physics,  microbiology,  neurophysiology,  political  science, 
urban  planning,  and  nuclear  engineering,  most  of  the  members 
are  primarily  computer  scientists  and  speak  the  same  languages. 
Almost  all  the  participants  have  desks  or  offices  in  the  same 
laboratory.  Intercommunication  is  easy  and  there  has  been 
much  of  it.  For  an  example,  this  spring  there  were  12  Special 
Interest  Groups  --  actually,  planning-design-implementation 
task  forces  —  and  one  over-all  Central  Coordinating  Committee. 
For  another  example,  the  working  documents  of  the  Dynamic 
Modeling  System  come  to  approximately  2,000  typewritten  pages. 

Even  with  the  problem  of  achieving  coherence  thus  scaled 
down,  the  difficulties  have  seemed  very  great.  From  the  very 
beginning,  the  "managers"  preached  coherence,  generality, 
documentation,  and  modularity-in-the-small  while  the  creative 
drives  of  the  "programmers"  and  the  joyous  positive  reinforce¬ 
ment  achieved  through  successful  erection  of  ever-larger-and- 
more-elegant  software  castles  swept  the  project  in  the  opposite 
direction.  (We  put  "managers"  and  "programmers"  in  quotes 
because  they  are  roles,  not  people.  A  group  leader  alone  at  a 
console  is  a  programmer  and  creates  his  own  castle.  A  software 
specialist  on  the  library  "SIG"  is  a  manager  —  until  he  gets 
back  to  a  console.) 

The  coherence  and  systematization  that  we  have  achieved 
was  won  at  the  cost  of  great  effort,  mainly  group  rather  than 
individual  effort,  and  always  through  several  iterations  that 
discarded  much  or  most  or  all  of  the  initial  schema  in  order 
to  adjust  to  new  ideas  or  to  concurrent  interacting 
developments.  The  process  has  been  hard  on  several  proponents 
of  initial  schemata,  and  it  has  given  the  Dynamic  Modeling 
System  some  of  the  nature  of  a  patchwork  quilt.  Nevertheless, 
the  process  has  brought  the  system  close  enough  to  the 
initial  "dream"  to  let  the  dreamers  feel  that  it  is  what  they 
envisioned,  and  has  come  close  enough  to  melding  the  partly 
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antagonistic  philosophies  that  thei 
disruptive  factor.  e;l 


r  antagonism  is  no  longer 


MUDDLE 


PLAN  OF  THE  DYNAMTc’^MODELIN^SYSTEM^MUDDt’p"113  th®  0VER-ALL 
powerful  and  convenient  environment 'for  t  E • Pr°Vides  a  verY 
can  create  a  fairly  comolev  nT  for  trying  out  ideas.  One 
is  wrong  with  it,  and  modify1 it  and'retpJh>  iS  right  and  what 
it  away  and  begin  over  —  relative^an?^,  **  “n  °r  eVen  throw 
person  with  almost  zero  previous  quicklY-  E°r  example,  a 
LISP,  to  which  MUDDLE  is  most  clolel^re?^  atth  MUDDLE  (and 
depugged  a  descriptor-based  inform  ¥*■  related)  prepared  and 
10  hours  at  the  console  plus  2  h^r^atT®^^?1  System  in 
hours  at  the  console  he  LproqrlL  ft  desk-  In  10  m°re 
ways.  The  best  version  is  now  ^  two  quite  different 

MUDDLE  retrieval  system  (somewhat  mo  COmbln?d  witk  another 
a  more  experienced  programmer  in  one^ff 01Pplex'  programmed  by 
will  then  be  redone  in  a“bw  or  oo  rn°°n)  '  and  tha  whole 
efficiently  under  CALICO.  Y  cmpiler  code  to  operate 

interpreter^5 and  'at^present  aS  an 

xssns.*fe-~gfcrs.18  srt  „ 

is  -  «vi££.Eh£  SJSTSTSi  5S5S-**?- 

i  development eofhMUDDLE  are  tGeSy ^uJsm6"3^617  t0  the  dGsi(?n 

Hi  *,  and  Drew  McDermott  vc  the  Art i  f Carl  Hewitt,  Jeff 
Laboratory  and  Reeve,  Daniels  f' 1  InteHigence 

Daniels  is  developing  a  MUDDLE  ™SfY'  a"u  Flei^her*. 
increase  efficiency  of  execution cmpiler,  which  will  greatly 
orm,  and  it  functions,  but  it  will  „nfi!StS  now  in  rudimentary 
use  until  late  fall.  MUDDLE -s  vor  be  ready  for  widespread 

space  will  become  tolerable  in  Decemh°US  °onsu™Ption  of  memory 
Paging  .ub.ysten,  of  the  PDP-lo  comp^J  iL' "7,-^ t II f ? "“=  C°'J 

.«brou^IT5o;"s,ii£bjn“r1ss*i«»  ^  i5»  -»» 

the  confluence  of  the  personal  MUDDLF  fn'  a£ter  are  simP1V 
r^Srter,',BroOS'  Metcalfe,  Stern'  Blao)/  o  °f  Recve-  Daniels, 
and  Licklider,  and  the  collection  consiif,^SSey'  Ryan'  Rubin 
It  is  a  mere  beginning  because  MUDDLE  mere  be9inning. 

of  the  Dynamic  Modeling  System  rather  w  lnbo  the  Planr>ing 
ease  with  which  one  can  nt-ll  rather  late  and  because  the 

^evGnfhn?e  UP°n  3  b-brary •  MUDDLE  Sfit  t0  de“emPhasi2o 

S ySV"“eleSS’  “  “P°P«nt  part,  oilj 

MEDDLE^Pfister^  ^afgrea^^faci de^Ugginq  aid- 
There  is,  also,  a  dynamic  loader  fPfi-?*  USe  °f  MUDDLE- 
functions  that  retrieves  thS^SS^ i^S.?  th^Tf* 

Modeling, 
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called  by  other  MUDDLE  functions.  Graphics  capabilities  are 

Evans  ^  MUDDLE  in  tWO  *ays =  exploits  the 

"P^Lvvisfnn"  ^nr  Processor  and  a  graphics  subsystem  called 
dfania  (Daniels,  Michener,  Black,  Broos) ;  the  other  uses 

display  programs  that  operate  in  the  Imlac  consoles  (Ryan, 

Rubin  and  Brodie) .  *  ' 

F.  CALICO 

with  2(  CALIC0  includes  subsystems  concerned 

the  var^°Vs  asPects  on  interactive  computing, 
fho  hK  subsyste™s  are  built  out  of  library  subroutines,  and 
the  subsystems  share  subroutines  insofar  as  possible.  The 

seDfratedU^n?UtlneS  either  entirely  pure  procedures  or  are 
®®P®5!ted  ^nto  pure  and  lmPure  parts.  Only  one  copy  of  a  pure 
p  ocedure  (or  pure  part)  is  held  in  core  memory,  but  there  is 

process^ 6 thereof ?PY  °f  P*rt  f°r  ®aCh  ^ 

MEDIATION  OF  INTERACTION 

and  Inberactbo"  between  the  user-programmer  at  the  console 
the  rest  of  the  system  is  mediated  mainly  by  the  command 

Brescia"6  Pel tan?riff)d  ^  Cor?sole  alphanumeric  subsystem  (Cohen, 
Brescia,  Peltan) ,  and  several  console-graphics  subsystems. 

Ihe  latter,  more  complex  than  shown  in  Fig.  2,  include  a 
display-management  subsystem  for  the  Evans  and  Sutherland 
display  processor  (Michener,  Black,  Geer  and  Curley),  a  sub- 

subsvstemrfStylUS_tablet  lnpUt  (HUi'  Guertin'  Broos,  Niles),  a 
subsystem  for  composing  two-dimensional  and  three-dimensional 

graphs  and  charts  (Black,  Pangaro,  Cutler,  Siegel),  and  a  sub- 
Ryan61"  f°r  ImlaC  and  ARDS  9raPhics  (Peltan,  Conklin,  Rubin, 

SUBROUTINE  MEDIATION  OF  CALLING  AND  RETURNING 

There  are  no  "main  routines"  in  CALICO  —  only  subroutines 
Either  a  MUDDLE  function  or  the  mediator's  initializer  serves 
as  the  top-level  routine.  The  subroutines  of  CALICO  are  of 
several  kinds.  On  one  dimension  of  variation  are  "fully 
mediated  ,  'lightly  mediated",  and  "unmediated".  On  a  second 

dn?eaal°n(.,ar®  "locabion-sensitive"  and  "location-insensitive", 
and  on  a  third  are  "internal"  and  "external".  The  mediator  .-ARE 
(Reeve,  Harris,  Hughett,  Brodie,  Licklider)  handles  the  callinq 
and  returning  of  fully  and  lightly  mediated  subroutines 

*“?V°n\r01  at  4mes  °f  callin9  and  returning,  performing 
several  housekeeping  functions  on  behalf  of  the  callinq 

calied,  returning,  and  receiving  subroutines,  and  affording 
the  user- programmer  an  opportunity  to  intervene.  Only  low- 
level,  inner- loop  subroutines  are  unmediated,  and  only  such 
routines  (and  only  a  few  of  them)  are  internal  —  i.e  ,  built 

frger\higher"level  routines-  The  governing  philosophy 
calls  for  extreme  modularity,  for  independence  of  each  sub- 

^nnlne  fr°m  others  excePt  through  calling  and  returning 
®q“cce=!  and  for  purity  and  location-insensitivity  insofar 
as  pos-ibie.  Every  fully  mediated  subroutine  and  every  data 
set  has  a  header  that  permits  other  software  entities  to 
discover  its  pertinent  properties.  The  mediator  is  set  up  to 
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S  °f  ““  »=„„  « 

go  Into  effect  (on  an  optional  basis)  shorSy?  '  U  “U1 

COMMUNICATION 

inherent'I^thflTS^stera^"  b9?ed  °n  ^abilities 
purposes  (Cohen,  Brescia  Peltan)^  ^lgbtly  au9me.nted  for  our 
and  user-to-user  messages  are  Swi  Syste™il"  announcements 
in.  If  the  intended  rlcipient-s  ^n-l?lab  ^  time.°f 

is  enabled,  one  user  can  fnn„  __  me  communication  function 
user's  display.  An admLi^raH  dlr6Ctly  ont°  another 

used  as  a  communication  medium  Anr/th  9r<29  3nd  direct°ry  are 
directory  and  information And  there  is  a  users' 

contains  names  addresses"^ system  (Guida)  that 
project  dM^tSJ'SrSU'JJlS--  n“"b"S’  lnterosts, 

information  retrieval 

about  programs  an^dat^setsh^Brvan  fMart^tfi6Ving  information 
Multi cs  and  is  used  either Hr™  !  iu  tln|  operates  in 
a  Multics  console.  (It^as  develo^d®/*™  t,etwork  or  through 
had  disk  files.,  It  has  turned  ournot6torh  ^  PDP"10  syst*m 

because  of  log-in  delays  and  Ip!  "  be  very  Practical, 

subsystem  as  In  aid  in^n-line  !! ■  C°StS '  to  use  that 

reprogramming  the  system  on  the  ™p!“n?;  are(  therefore, 
versions  (Broos,  Licklideri  IrZ  °‘  T  °  Preliminary 

design  of  the  command  in terpreLrand^n1"5  10  MUDDLE-  The 
make  it  possible  to  stop  at  anj  point  in  Jhf  ”  mediator 
program,  explore  the  librarv  La w  *  the  execution  of  a 
subprogram  for  one  that  is  in  line  newly  selected 

substitute  a  newly  selected  Lta  bo  be  Called  ~  or  to 

be  processed.  We  hope  to  realize^hat^  is  in  line  to 

this  fall.  P  realize  that  capability  in  operation 

DATA  MANAGEMENT 

"Keyed  Data  Manager "^Havertv^Lehl  <ronflsts  at  Present  of  the 

(Haverty) .  The  former  provides  a  Jeani  f^  "Lexiconte^t" 
retrieval  labels  (kevn)  \  c  f  associating 

filing  and  retrieving  the~data  in  ^ary.^nits  of  data  and  then 
The  latter  provides  I  means  for  1^  °™  and  effi™t  way. 

basic  lexical  units  (usually  English^ordsf  in  terms  of 

structured  concatenations  (phrases  hJLtd  9nd  hlerarchically 
chapters)  of  them  It  is  much  m  '  sentfncesf  paragraphs, 
efficient  to  process  LxLontL^  straightforward  and 
it  is  to  process  strings  of  factors  representati ves  than 

Modeling  System  was  conceived  Because  the  Dynamic 

we  have  not  developed  a  contert-oriented^ata"^2™6  system' 
system.  Even  as  our  intercom  °nented  data-management 

automatic  programming  and  debugging3*"?^ !!USin?'  ?n..  the  field  of 
shall  want  to  keep  the  data  man5  g'  lfc  seems  likely  that  we 
rather  than  field-specific  and  SUbsystem  general, 

upon  processing  programs  written  i^such  lanauf  sensitlvity 

in  such  languages  as  PLANNER 
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and  CONNIVER. 
DEBUGGING 


The  principal  debugging  aid  is  still  DDT,  which  operates 
as  a  process  separate  from  (superior  to)  the  one  that  is  being 
debugged.  DDT  is  not  a  part  of  CALICO.  We  have  augmented  it 
somewhat  (Cutler) ,  but  we  have  not  tried  to  modularize  and  in¬ 
tegrate  it. 

In  an  effort  to  aid  the  programmer  in  visualizing  the 
execution  of  his  programs  and  in  seeing  their  flaws  as  the 
flaws  are  encountered,  we  have  developed  a  PDP-10  simulator 
(Galley,  Hughett)  and  a  graphical  debugging  aid  (Galley,  Liu). 
Together,  they  display  the  flow  of  control  through  selected 
parts  of  a  procedure  and,  at  the  same  time,  the  flow  and  trans¬ 
formation  of  the  data  operated  upon  by  the  procedure. 

A  second  graphical  debugging  aid  is  nearing  completion 
(Hughett) .  It  records  the  execution  history  of  a  program  and 
then  organizes  and  traces  "trees  of  influence",  working  back¬ 
wards,  into  the  past,  to  check  each  operation  that  contributed 
to  the  shaping  of  an  incorrect  value. 

Work  is  under  way  on  other  debugging  aids  that  check  the 
values  of  selected  variables  during  the  course  of  execution 
(Stern)  .  Plans  call  for  the  integration  of  all  these  debug¬ 
ging  tools  (except  DDT)  and  for  their  correlation  with  the 
mediator,  which  will  make  it  possible  for  the  programmer  to  turn 
them  on  and  off  at  call  and  retrieve  points  during  the  execution 
of  a  program. 

INPUT/OUTPUT,  INTERRUPT  HANDLING,  AND  UUO  HANDLING 

The  input/output,  interrupt-handling,  and  UUO  handling 
subsytems  include  sets  of  CALICO  macros  and  subroutines  that 
are  invoked  by  application  programs  and  that,  in  turn, 
communicate  with  ITS.  They  include,  also,  the  code  required 
to  handle  certain  common  interrupt  situations  and  to  accept  new 
UUOs .  ("UUO"  stands  for  "Unimplemented  User  Operations",  which 
are  codes  that  resemble  PDP-10  instruction  codes  but  are  left 
for  users  to  define.)  These  subsystems  allocate  resources 
dynamically,  insulate  application  routines  from  such  absolute 
qualities  as  channel  numbers,  and  generally  facilitate 
applications  programming.  They  were  designed  and  implemented 
by  Haverty,  Broos,  Reeve,  Seriff,  Long,  Lebling,  and  Hughett. 

COMPILING 

The  only  compiler  that  we  have  thus  far  made  consistent 
with  CALICO  is  the  PL/1  subset  compiler  mentioned  earlier 
(Okrent,  Sybalski) .  It  translates  statements  frcm  the  subset 
of  PL/1  into  MIDAS  source  language  and  accepts  all  the  macros 
and  respects  all  the  conventions  of  CALICO. 

SPECIAL  TOOLS  FOR  MODELING 

In  the  philosophy  of  modeling  that  we  have  tried  to 
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implement,  it  is  not  held  desirable  to  restrict  oneself  a 
priori  to  the  context  or  "world  view"  of  any  single  modeling 
or  simulation  language  such  as  SIMSCRLPT,  GPSS,  SIMULA,  or 
DYNAMO.  Ideally,  we  would  like  to  have  the  good  features  of 
many  such  languages  brought  together  within  one  consistent 
framework  (such  as  MUDDLE  or  PL/1) .  In  fact,  we  have  devoted 
our  energies  mainly  to  erection  of  the  framework,  and  we  have 
not  completed  a  kit  of  tools  of  the  kind  (e.g.,  event  schedulers, 
queue  managers)  that  are  features  of  the  simulation  languages 
mentioned.  Work  on  several  such  tools  is  being  done  by 
Okvent,  Fox,  and  Weissberg.  A  major  aim  in  this  work  is  to 
facilitate  the  construction  of  models  that  include  both 
continuous-process  and  discrete-event  components. 

DYNAMIC  LOADING 

In  CALICO,  the  top-level  subroutine  is  called  through  the 
mediator  either  by  a  MUDDLE  function  or  by  the  user  at  his 
console.  If  it  is  already  in  core  memory,  the  subroutine  is 
executed;  if  it  is  not  already  in  core  memory,  it  is  loaded  by 
DYNAL  (Reeve,  Erodie)  and  then  executed.  Thereafter,  each 
called  subroutine  that  is  not  in  core  is  loaded  dynamically 
and  then  executed.  The  called  routines  are  sought  by  DYNAL 
first  in  the  user's  files,  then  in  a  recent-accessions  file, 
and  finally  in  the  main  library. 

THE  LIBRARY 


The  part  of  the  Dynamic  Modeling  System  into  which  the 
greatest  amount  of  effort  has  been  put  —  and  the  part  on  which 
the  success  or  failure  of  the  "community”  philosophy  rides  — 
is  the  library.  At  present,  there  are  about  500  subroutines  in 
the  library.  They  range  from  simple,  low-level  subroutines 
that  "get"  and  "put”  characters  or  symbols  to  complex,  high- 
level  subroutines  that  translate  programs  or  display  three- 
dimensional  graphs  of  hand-printed  functions.  Corresponding 
to  each  executable  library  subroutine  there  is  a  source- 
Janguage  listing  that  includes  an  abstract  that  can  be  retrieved 
on-line  and  contains  all  the  information  required  by  a  program¬ 
mer-user  to  use  the  subroutine  successfully. 

G.  DOCUMENTATION 


An  over-  all  view  of  the  Dynamic  Modeling  System  and  infor¬ 
mation  about  how  to  get  started  are  provided  by  Galley's  "A 
Novice's  Introduction  to  the  System".  It  deals  with  CALICO, 

ITS,  the  utilities,  and  the  hardware  rather  fully  but  leaves  to 
another  document  a  ccmparable  introduction  to  MUDDLE.  That 
document  is  Pfister's  "A  MUDDLE  Primer",  which  permits  anyone 
with  basic  knowledge  of  programming  to  move  very  quickly  into 
MUDDLE  programming. 

Essential  technical  information  about  the  PDP-10  computer 
is  collected  in  the  manufacturer's  System  Reference  Manual. 

Full  descriptions  of  the  tts  operating  system,  the  MIDAS 
assembler,  and  several  utility  programs  are  contained  in  reports 
of  the  M.I.T.  Artificial  Intelligence  Laboratory.  The  DEC  and 
AI  Laboratory  sources  cover  the  foundations  of  the  Dynamic 
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Modeling  System.  The  superstructure  is  described  in  a  rather 

M^TtnOU%Set  °f  docun,ents  prepared  by  members  of  the  Dynamic 
Modeiing,  computer  Graphics,  and  Computer  Networks  Groups.  At 
present,  a  Dynamic  Modeling  System  Manual  is  being  prepared  on 
the  basis  of  these  documents.  K 


The  set  of  documents  is  subdivided  into  several  classes: 

GA  General  and  Administrative 
SYS  Basic  System 
SR  Subroutines 
MCR  Macros 

UUO  "Unimplemented  User  Operations" 

DTCS  Data  Types,  Classes,  and  Sets 
FA  Form  Abstracts 
LA  Listing  Abstracts 

Convention  II  : 


°ftthe  l3  General  and  Administrative  documents 
,  a  syftem  of  ..standards,  protocols,  and  conventions 

uni  form- ^°nVe^tl0k  11  '  Ifc  sets  forth  rules  intended  to  foster 
uniformity  and  coherence  in  those  areas  of  software  system 

evelopment  in  which  many  minor  decisions  must  be  made  among 
alternatives  that  differ  only  slightly  in  utility.  Decisions 
about  format  are  often  of  that  kind:  it  doesn't  matter  mich 
w  ich  format  is  adopted  for  bibliographic  references,  for 
example,  but  it  is  considerate  of  the  reader  to  make  thinas 
consistent.  We  note,  however,  that  the  subject  of  sofJware 

th^deoth^f1^011?  'n  w^1=h.Pe°Ple  have  deep  ego-involvements, 
aSce  of  5he  issue  £me  ^  r6lated  inVersely  *>  the  import- 


tt  nna  ^°k  hours  of  argumentation  to  define  Convention 

II,  and  it  would  have  taken  many  more  hours  of  policing  to 

on  Une  lt/ere  n0t/°r  one  fact:  documentation  is 

n  line,  and  uniformity  of  format  makes  it  possible  for  computer 
programs  to  deal  with  documents.  There  is  now  quite  a  collec¬ 
tion,  -of  subroutines  and  macros  that  extract  the  titles,  one- 
-  line  descriptions,  descriptor  sets,  and  so  on  from  listing 
abstracts.  Broos  TECC  macros  run  through  the  library  of' 
source  programs  and  update  the  Listing  Abstract  Book  at 
regular  intervals.  Lebling’s  macros  count  each  user's  files 

the  dtSk  Space  they  occuPy'  and  the  posted  results 
apply  strong  moral  pressure  on  "disk  hogs"  to  delete  the  least 
actrve  items.  And  so  on.  It  is  obvioul  now  that  it  is  very 
important  for  programs  to  be  able  to  know  a  lot  about  programs 
and  we  want  to  move  toward  having  programs  understand 
documentation.  Format  is  of  course  only  one  of  many  facets  of 
software  that  programs  should  know  about,  but  it  holds  some  of 
the  Keys  to  learning  about  the  other  facets. 

Subroutine^:  For  most  low-level  subroutines,  the  listina 
abstract  -  usually  about  two  typewritten  pages  in  length  —  9 
provides  adequate  documentation.  For  high-level  subroutines, 
however,  the  problem  is  different  because  each  hiah-level 
subroutine  organizes  the  work  of  several  or  many  low-level 
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subroutines  and,  in  effect,  is 
calls  for  a  full  program  write- 


a  complex  subsystem.  Protocol 
up  for  each  such  subsystem. 


Among  the  principle 
discussion  are: 


subsystem  of  the  type  under 


Name  Function 


Author 


PARSE 

OBDIS 

CHAREG 

GRAPH 

ESKBD 

PENGET 

MATTER 


PREORD 

ATTACH 


DATPGE 

KDM 

OLDS 


General  parser  K.  Brown 

Object  display 
handler  Uui 

Character  recognizer  Hui 
Cartesian  graphs, 

2D  &  3D 

Character  strings 
on  display 
Stylus-tablet  input 
Display  of  2D  &  3D 
graphs  corresponding 
to  hand-printed 
functions 
Binary  trees 
Compression  of 
machine- language 
files 

Data  paging  for 
disk  files 
File  manager 
On-Line  document 
system 


Black 

Broos 

Michener 


Guertin 
Ok rent 


Daniels 

Haverty 

Haverty 


Bryan 

and  Martin 


Identificati on 


SR.  12.  (31 

SR. 15.01 

SR. 15.05 

SR. 15.06 

SR. 15.09 
SR. 15. 13 


SR. 15. 14 
SR. 16 .01 


SR. 18.01 

SR. 18.01 
SR. 19. 02 

SR. 21.00  - 
SR. 21. 12 


Other  Categories:  Macros,  UUOs,  and  other  categories  of 
tware  are  documented  in  approximately  the  same  wav  as  sub 
routines,  but  the  effort  to  get  them  and  keep  ttem  under 

describingbmacr^an^UU^subsystems^re^'liste^in  a°periodS 

DocumentationdSerie5 .  °£  °f  ^  Dynamic  Modelin^ 


dCtS  I 


Oil 


— r -  item  .in  the  documen 

system  has  turned  out  to  be  the  listing  abstract.  It  is  oart 
f  the  source-language  listing  of  each  subroutine  or  data' set 
and  no  subroutine  or  data  set  can  get  into  ?heUbrary  without 

"form  ab!tracts"Ctthathare  ^  alS°  °ther  abstracts'  called 

1  /  that  a  Programmer  prepares  on  printed  forms 
when  he  begins  to  work  on  a  program.  Because  they  are  avail  hi, 

mainstay.33  WSl1  93  °ff>  '  listing  abstracts  have  become  the1 


H .  MODELING 


Although  the  main  effort  of  the  past  three  years  has  h^n 
to  build  a  system  to  facilitate  modeling,  we  hive  engaged  S 
are  engaging)  with  colleagues  outside  Project  MAC  in  several 
substantive  modeling  efforts.  These  inc?ulf a^odl?  of  a 
neuronal  network  (Bingham,  Jarvis,  Reeve,  Balin) ,  an  air- 


k 
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traffic-control  simulation  (McMillan) ,  a  simulation  of  airport 
air  traffic  (Dosett) ,  an  urban  development  simulation  (Professor 
Aaron  Fleischer,  Allaman) ,  a  political  science  simulation 
(Lebling) ,  a  model  of  a  neural  time-to-place  transformation 
(Professor  Jerome  Lettvin,  Paul  Pangaro) ,  and  a  model  of  the 
protein-building  process  that  involves  RNA  (Professor  Alex 
Roch,  Siemeus)  .  The  last-mentioned  effort,  just  getting  under 
way,  involves  an  IBM  360-91  computer  at  UCLA  as  well  as  the 
Dynamic  Modeling  System;  the  91  will  handle  the  "number 
crunching"  and  the  Dynamic  Modeling  System  the  interactive  part 
of  the  work,  which  will  exploit  quasi-3D  graphic  display. 
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Publications 


1*  Brescia,  M.  F.,  Time— Sharing  a  Display  Processor  for 
a  Time-Shared  Computer  System,  S.B.  Thesis.  Department 
of  Electrical  Engineering,  M.I.T.,  February  1972. 

2.  DeTreville ,  J.  D. ,  Design  and  Implementation  of  an 
Example  Operating  System,  S.M.  Thesis.  Bpnar'fmpnf  pf 
Electrical  Engineering,  M.I.T.,  1972. 

3.  Donovan,  J.  J.,  Systems  Programming,  McGraw-Hill, 

New  York,  1972. 

4.  Donovan,  J.  J. ,  Teacher's  Manual  to  Accompany  Systems 

Programming,  McGraw-Hill,  New"Y'ork,  19  72. - - - 

5.  Fleischer,  R.  J.,  Computer-Aided  Visual  Analysis  of 
Statistical  Data,  S.M.  and  S.B.  Thesis,  Department  of 
Electrical  Engineering,  M.I.T.,  August  1971. 

6.  Galley,  S.  W. ,  A  Novice's  Introduction  to  the  System, 

DM/CG/CN  Group  Memo,  SYS.  00. 00,  Project  MAC,  M-.  I  T — 
March  1972.  ' ' 

7.  Haverty ,  J.  F.,  Lexicontext  A  Dictionary-Based  Text 
Processing  System,  S.M.  and  S.B.  Thesis.  Department 
of  Electrical  Engineering,  M.I.T.,  August  1971. 

8.  Hui,  W.  F.,  An  Algorithm  for  Detecting  the  Inter¬ 
section  of  Arbitrary  Computer-Displayed  Figures?  S.B. 
Thesis,  Department  of  Electrical  Engineering,  M. I . T . , 
June  1972. 

9.  Konig,  D. ,  Evaluation  of  PL/I  as  an  Interactive 
Language ,  S.M.  Thesis,  Department  of  Electrical  Engin¬ 
eering,  M.I.T. ,  1972. 

10.  Licklider,  J.  C.  R. ,  "Criteria  for  Design  and  Evalua¬ 
tion  of  Information  Networks",  SIGIR,  ACM,  Las  Vegas, 
Nevada,  November  1972. 

11.  Madnick,  S.  E. ,  "Program  Parallelism  Based  upon  Compu¬ 

tation  Schemata",  Sixth  International  Congress  on 
Cybernetics ,  1972,  pp .  480-494.  - 

12.  Madnick,  S.  E.,  Storage  Hierarchy  Systems,  Ph.D.  Thesis, 
Department  of  Electrical  Engineering,  M.I.T.  ,  1972. 

13.  Metcalfe,  R.  M. ,  Anderson,  et  al.,  "The  Data  Recon¬ 
figuration  Service  —  An  Experiment  in  Process/Process 
Communication",  Proceedings  of  the  Second  Symposium 

on  Problems  in  the  Optimisation  of  Data  Communications 
Systems ,  Stanford  University,  October  1971. 

14.  Metcalfe,  R.  M. ,  S.  Crocker,  et  al. ,  "Function-Oriented 
Protocols  for  the  ARPA  Network",  SJCC,  1972. 
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Publications  (continued) 


15.  Metcalfe,  R.  M. ,  "Strategies  for  Interprocess  Communi¬ 
cation  in  Distributed  Computing  Systems",  Conference 
on  Computer  Communication  and  Teletraffic,  April  1972. 

16.  McCray,  W.  A.,  SIM360;  A  S/360  Simulator,  S.B.  Thesis, 
Department  of  Electrical  Engineering,  M.I.T. ,  1972; 
also  MAC  TM-30 ,  May  1972,  AD  749-365. 

17.  Okrent,  H.  F.,  Design  of  the  Dynamic  Modeling  Manager, 
S.M.  Thesis,  Department  of  Electrical  Engineering, 

M.  I.T. ,  June  1972. 

18.  Pfister,  G. ,  A  MEDDLE  Manual,  DM/CG/CN  Group  Memo, 

SYS. 11.02,  Project  MAC,  M.I.T.,  January  1972. 

19.  Pfister,  G. ,  A  MUDDLE  Primer,  DM/CG/CN  Group  Memo, 

SYS. 11. 01,  Project  MAC,  M.I.T.,  July  1972. 

20.  -Seiferas,  J.  I.,  Observational  Complexity  of  Character 

Strings ,  S.B.  Thesis ,  Department  of  Electrical  Engin- 
eenng ,  M.  I  .T.  ,  1972. 

21.  Zaborowski ,  S.,  Monitoring  Student  Programs  --  A  Case 
Study  in  Software  Reliability,  S.B.  Thesis,  Department 
of  Electrical  Engineering,  M.'l.T.,  1972. 


Talks 

1.  Donovan,  J.  J.,  "Memory  Management",  presented  as 
part  of  the  Yale  Fall  Lectures  in  Computer  Science, 


2.  Donovan,  J.  J.,  a  series  of  8  lectures  presented  at 
the  University  of  Pittsburgh,  Spring  1972. 

3.  Licklider,  J.  C.  R. ,  "The  Concept  of  an  Interactive 
Technical  Journal",  Annual  Symposium  on  Information 
Retrieval,  May  1972. 

4.  Licklider,  J.  C.  R. ,  "ADP  Technology",  Department  of 
Defense  Computer  Institute,  June  1972. 

5.  Licklider,  J.  C.  R. ,  "Future  of  Library  and  Informa¬ 
tion  Systems",  National  Academy  of  Sciences,  June 
1972. 


Metcalfe,  R.  M. ,  "The  ARPANET',  ACM/SIGREAL,  Cambridge, 
Mass.,  March  1972. 

Metcalfe,  R.  M. ,  "The  ARPANET",  Stanford  Digital 
Systems  Seminar,  May  1972. 
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A.  Present  Work 

During  the  period  July  1971  to  May  1972,  the  group  continued 
several  research  activities  which  were  initiated  before  this 
period,  and  are  discussed  below.  Halfway  through  this  period, 
Prof.  M.  L.  Dertouzos  and  his  students  came  from  the  Elec¬ 
tronic  Systems  Laboratory  to  Project  MAC  and  joined  the  group. 
During  that  time,  relatively  few  new  activities  were  initiated 
partly  because  of  extensive  involvement  of  the  faculty  in  the 
development  of  6.252  and  partly  because,  with  the  departure 
of  Prof.  J.  Weizenbaum  for  a  two-year  period  starting  in  the 
Fall  of  1972,  the  group  intends  to  re-orient  its  objectives 
and  scope  of  research. 

Continuing  research  entailed  the  following: 

1.  Study  of  means  for  making  possible  the  animation  of  dyna¬ 
mic  processes  for  educational  purposes.  In  particular, 
several  approaches  were  investigated  for  the  interconnection 
of  a  simulated  process  (a  simple  two  address  machine)  to  a 
graphical  process  (e.g.,  representations  of  registers  and  a 
processor  stack)  .  It  is  intended  that  this  interconnection 
be  flexible  enough  to  allow  on-line  editing  of  the  graphical 
representations  independently  of  the  simulated  machine.  Super¬ 
vision  of  this  work  was  initially  under  Prof.  J.  Weizenbaum 
and  has  shifted  to  Prof.  M.  L.  Dertouzos  a  few  months  ago. 

2.  An  associative  memory  higher-level  interpreter.  This 
work  involves  exploration  of  the  use  of  an  associative  memory 
with  a  higher-level  language  hardware  interpreter.  The 
objective  is  to  match  the  hardware  memory  and  processor  to  the 
environment  and  interpreter  structures  of  a  higher-level  lan¬ 
guage  such  as  LISP.  Such  a  match  which  appears  to  be  econo¬ 
mically  feasible  with  current  technology,  eliminates  the  need 
for  the  typical  machine  language  and  numerical  memory  loca¬ 
tion  issues  which  are  quite  distinct  from  the  user's  language. 
This,  in  turn,  means  the  absence  of  assembly,  compilation, 
relocation,  storage  allocation,  and  address  computation  tasks 
in  their  traditional  sense.  The  elimination  or  reduction  of 
these  problems,  in  turn,  frees  us  to  study  more  fundamental 
notions  concerning  procedure  semantics  and  computing  environ¬ 
ments.  This  work  is  supervised  by  Prof.  M.  L.  Dertouzos. 

3.  Two  Ph.D  theses  being  completed  June  1972  and  September 
1972  are  carry-overs  from  the  research  of  Prof.  M.  L. 

Dertouzos  in  Computer-Aided  Design.  One  thesis  involves  the 
study  of  exact-inexact  machines  for  the  solution  of  large  sys¬ 
tems  of  equation.  These  machines  consist  of  a  digital 
relatively  accurate  exact  part  and  an  analog  or  coarser  digi¬ 
tal  inexact  part.  Programming  the  machines  entails  decompos¬ 
ing  the  problem  into  a  part,  which  checks  a  proposed  solution 
with  a  computing  time  that  grows  relatively  slowly  with  pro¬ 
blem  size  —  this  is  handled  by  the  exact  part  of  the  machine; 
and  another  part  which  proposes  a  new  solution  on  the  basis 

of  the  above  check  —  this  part  which  would  normally  require 
a  large  amount  of  computing  time  is  done  rapidly  by  virtue  of 
the  inexactness  of  the  subsystem  that  handles  it.  The  overall 
solution  is  as  exact  as  the  exact  part  of  the  machine. 

This  research  has  resulted  in  many  interesting  results  which 
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arc  documented  by  Jim  Stinger’s  Ph.D.  Thesis.  The  work  is 
supervised  by  Prof.  M.  L.  Dertouzos. 

4.  The  other  Ph.D.  thesis  (P.  Jessel)  involves  the  develop¬ 
ment  of  a  "language"  which  describes  existing  and  hopefully 
new  circuit  analysis  programs.  Expressing  a  circuit  analysis 
program  in  this  language  leads  to  the  ability  of  measuring 
with  acceptable  accuracy  the  power  of  that  program,  e.g.,  the 
computing  time  it  will  require  for  various  classes  and  various 
sizes  of  circuits,  the  amount  of  storage  used  and  so  on. 

These  measurements,  in  turn,  make  possible  a  comparison  of 
the  (many)  existing  and  p/oposed  circuit  analysis  programs  in 
a  systematic  way.  Several  inteiesting  results  have  been  ob¬ 
tained  to  date  and  more  are  expected  during  the  summer.  This 
work  is  supervised  by  Prof.  M.  L.  Dertouzos. 

5.  A  thesis  completed  under  the  supervision  of  Prof.  J. 
Weizenbavm  involves  the  development  of  simple  primitive 
functions  for  natural  language.  These  are  based  on  a  lay-word 
transformational  grammar  distinguishing  English  function 
words  and  a  canonical  representation  of  English  sentences. 

The  functions  provide  the  general  capability  for  saving  infor¬ 
mation  for  answering  questions,  for  executing  commands,  and 
for  doing  elementary  deductions.  They  are  designed  to  facili¬ 
tate  the  construction  of  special-purpose  computer  natural  lan¬ 
guage  systems,  with  ihe  particular  application  to  a  program 
for  generating  computer  graphic  displays  for  plane  geometry . 

B.  Future  Work 

1 .  The  6.252  Computer  System 

Academic  activities  will  continue  to  occupy  a  substantial 
part  of  the  time  spent  by  several  members  of  the  group.  These 
activities  involve  continuation  of  the  development  of  6.252 
and  the  development  of  a  6.252  time-shared  system.  The  latter, 
based  on  a  PDP-11/45  CPU,  is  a  limited-objective  8-user  sys¬ 
tem  (no  swapping,  one  file  per  user)  which  will  offer  to  stu¬ 
dents  a  subset  of  the  PDP-11  assembly  language  and  several 
LISP  interpreters  with  progressively  mere  complex  environment 
and  control  structures.  This  system,  which  was  purchased  by 
the  Electrical  Engineering  Department,  will  be  used  exclusively 
by  6.252  students  who  will  be  expected  to  use  it  for  an  average 
of  2  (console)  hours  per  week. 

It  is  also  expected  that  the  system  will  be  used  to  implement 
the  on-going  research  work  on  graphics  (1  above) ,  for  the 
purpose  of  demonstrating  to  students  either  on-line  or  through 
movies,  several  dynamic  processes,  e.g.,  (i)  stack  operations 

during  execution  of  recursive  procedures,  (ii)  implementation 
and  consequences  of  global  labels  and  free  variables,  and 
(iii)  garbage  collection  algorithms. 

2 .  Continuation  of  Present  Work 

Of  the  present  work,  it  is  expected  that  items  A.l.  and  A. 2. 
above  will  be  continued. 
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Exploration  of  New  Areas 

tLP“ea°of“iLi™D  “t^UieS:  “e  grc>“P  M  explore 

^4TKrs.*:  “* 

*  c«C!Ut  the  so-called  servo.  We  believe  that  in 

iy  f  ™.srs!“K;s  s/ssb 

ma  ^an?uag°rand1athardwareeorganizationf1forehandling  the^e^ 
mands  imposed  by  the  intpr^nf  i  nn  4-u  ,  .  ^  tne  de 

world  LdfiLii!  interaction  of  the  machine  and  the  outside 

too  conveniently  with  the  1-0  techniques  developed™  tte 

ss'cS&j  orrs“^h^i„s,sUv“<!d  *«■>—  *■ 

S  S-roSer^;cL““iSj-  - 

to  r0b0tl"S  Can  be  studied  and  developed.  Our  intent  is 
ArtificiaTfaIntellf  excellent  results  obtained  to  date  by  the 
philosoDhv  1"t®lll^ence  People,  but  with  an  engineering 
philosophy,  i.e.,  to  some  extent,  subordination  of  "first 
principles  to  the  expediency  of  achieving  specific  tasks 
As  a  result  of  this  exploration,  we  would  like  to  arrived 
t!Tthe  more1aPPllcatlons  areas  that  deserve  further  work  or 
direction?  US1°n  that  Sh°Uld  n0t  Continue  work  in  Si's 
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The  past  year  has  been  a  year  devoted  mostly  to  consolidating 
our  previous  work.  The  "Mathlab"  PDP-10  arrived  during  the 
year  and  became  operational  in  February  1972.  Scores  of 
casual  sessions  with  the  MACSYMA  system  have  been  held.  Users 
were  increasingly  satisfied  with  MACSYMA  as  more  capabilities 
were  integrated  into  it  and  as  the  system,  now  approaching 
150K  words,  became  better  debugged. 

A.  The  Hardware  and  Time-Sharing  System 

The  basic  PDP-10  processor  and  one  half  its  memory  (i.e.  128K) 
arrived  in  October  1971.  Richard  Greenblatt  and  Thomas  Knight 
made  an  heroic  effort  to  bring  up  an  ITS  time-sharing  system 
compatible  with  that  on  the  Artificial  Intelligence  Group's 
machine.  The  new  file  system  they  created  was  given  to  the 
Dynamic  Modeling  group  and  tripled  their  effective  disk  utili¬ 
zation  . 

The  remainder  of  the  memory  arrived  in  December.  In  January 
Systems  Concepts  installed  a  pager  compatible  with  the  one  on 
the  Artificial  Intelligence  machine.  As  a  result,  the  Mathlab 
machine  is  able  to  use  the  latest  versions  of  the  Artificial 
Intelligence  time-sharing  systems.  Some  tnrashing  originally 
encountered  when  three  or  more  MACSYMA1 s  were  being  run  on 
the  Mathlab  machine  caused  a  redesign  of  the  scheduler.  As 
a  result  of  the  compatibility  of  the  software,  the  new  sched¬ 
uler  has  been  used  on  the  Artificial  Intelligence  machine  as 
well . 

B.  Consolidation  of  MACSYMA  Software 


The  past  year  was  spent  mostly  in  debugging  and  consolidating 
existing  code  into  the  MACSYMA  system.  The  presence  of  the 
new  machine  meant  that  more  users  were  available  to  report  on 
bugs,  and  two  or  more  versions  of  MACSYMA  could  be  run  and  de¬ 
bugged  at  the  same  time. 

While  MACSYMA  was  on  the  Artificial  Intelligence  machine,  we 
were  restricted  to  a  system  of  about  90K  words.  This  meant 
that  several  subsystems  of  MACSYMA  were  left  on  the  disk, 

The  latest  versions  of  MACSYMA  contain  almost  all  of  the  code 
and  a  little  larger  working  storage.  These  versions  approach 
150K  in  size.  Over  60%  of  the  system  is  pure  and  is  shareable 
by  several  users.  Recently  we  have  run  five  simultaneous 
versions  of  MACSYMA. 

We  decided  to  avoid  having  separate  user  and  experimental  ver¬ 
sions  for  a  while  longer.  The  current  version  of  the  system 
has  a  great  number  of  debugging  aids,  in  particular  the  ability 
to  trace  any  function  in  the  system.  The  effect  of  the  ease 
of  debugging  is  a  slowdown  of  the  system  of  a  factor  of  about 
four.  We  have  started  to  create  a  first  "release"  version  of 
the  system  which  would  not  have  the  debugging  aids.  The  timing 
studies  attempted  thus  far  for  the  release  version  have  un¬ 
covered  a  number  of  surprises  ,  as  seems  to  be  common  in  systems 
of  this  size.  One  common  style  of  LISP  programming  is  to  call 
a  function  indirectly  through  its  name  which  is  kept  on  the 
property  list  of  an  atom.  This  technique  seems  to  slow 
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down  a  function  call  by  a  factor  of  at  least  50.  With  the 
present  maturity  of  the  system  the  modularity  of  the  indirect 
call  is  not  required,  and  we  expect  an  increase  in  speed  in 
subsystems  which  rely  on  thir  technique .  Another  effect  of 
the  shift  in  coding  style  will  be  that  the  amount  of  impure 
data  in  the  system  will  be  decreased  noticeably. 

C.  New  Subsystems 

Paul  Wang  completed  his  doctoral  research  on  definite  integra¬ 
tion  last  summer.  This  subsystem  together  with  the  limit 
routines  comprise  15%  of  all  of  our  code.  It  is  being  inte¬ 
grated  into  MACSYMA  at  the  present  time. 

During  the  past  year,  we  completed  work  on  a  polynomial 
factorization  program  based  on  Berlekamp's  method  for  factori¬ 
zation  modulo  a  prime.  Drs.  Linda  Rothschild  and  Paul  Wang 
did  the  bulk  of  the  coding  with  some  help  from  Dr.  Richard 
Fateman.  The  present  program  is  the  only  one  which  can  fac¬ 
tor  polynomials  in  several  variables  efficiently.  Special 
case  techniques,  such  as  for  polynomials  of  the  form  Xn  +  1 , 
have  been  implemented  in  the  program. 

Richard  Zippel,  a  sophomore  in  mathematics,  has  almost  com¬ 
pleted  a  subsystem  for  the  manipulation  of  power  series. 

The  representation  of  power  series  is  different  from  that  of 
polynomials  in  that  the  coefficients  are  rational  functions 
rather  than  polynomials.  „The  subsystem  allows  the  user  to 
declare  cutoffs  such  as  Xs—*'  0  so  that  powers  of  a  variable 
higher  than  a  given  degree  are  neglected.  This  is  a  desirable 
capability  because  it  keeps  the  intermediate  expression  swell 
down  in  certain  applications. 

D.  The  New  LISP  Compiler 

Eric  Rosen,  with  the  help  of  Jeffrey  Golden  and  Jon  White, 
completed  a  new  version  of  the  LISP  compiler  which  compiles 
purely  arithmetic  code  better  than  the  current  DEC  PDP-10 
FORTRAN  compiler.  A  new  version  of  LISP  which  handles  arith¬ 
metic  function  efficiently  was  designed  by  William  Martin, 

Jon  White  and  Eric  Rosen.  MACSYMA  will  begin  using  the  new 
LISP  system  and  the  new  compiler  in  the  coming  year. 

E.  CONNIVER 


A  new  language,  called  CONNIVER,  has  been  implemented  in  LISP 
by  Gerald  Sussman  and  Drew  McDermott  of  the  Artificial 
Intelligence  Laboratory.  The  central  features  of  this  language 
were  suggested  by  Joel  Moses.  This  language  is  intended  for 
use  in  Artificial  Intelligence  applications  and  also  in  the 
Mathlab  group's  automatic  programming  efforts.  The  language 
has  the  capability  of  handling  local  data  bases  which  are 
erased  after  function  returns.  The  language  has  some  of  the 
features  of  PLANNER  such  as  pattern  matching,  but  lacks  the 
automatic  backup  which  PLANNER  utilizes.  We  believe  it.  to  be 
superior  to  PLANNER  for  most  applications. 
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F"  The  MACSYMA  (maximus?,  maximum?)  Experience 

’Jse  °f  has  increased  markedly  during  the 

versio^  T  bUgS  Sti11  exis^nd  the  ScSYMA 

l  liable  to  change  from  moment  to  moment,  the  fre- 

q ;ency  of  complaints  about  bugs  has  decreased  to  the  point  that 

o^use?  *  SeS31°ns  do  not  ^counter  bugs  in  several  tours 

^“"sofle  connected  to  the  Mathlab  machine  is  operating  in  the 
Mathematics  department.  Richard  Fateman  has  used  the  console 
faculty6  ^  problems  for  the  Applied  Mathematics 

h?fm=tY"  J  Particular,  he  solved  certain  integration  pro- 
linear  rtTffemS  2*  llnear  equations  with  parameters  and  non- 

f  differential  equations.  We  believe  that  at  the  present 

heiHinJ"CeSSfU^- use.of  ^CSYMA  is  best  achieved  by  a  "hand¬ 
holding  operation  in  '.hich  someone  familiar  with  MACSYMA 
solves  the  probiBm  on  the  computer,  should  the  system  be 
sufficiently  attractive  to  the  Mathematics  faculty,  then  thev 

rl  VT,  k°  inVer  the  time  t0  learn  how  to  use  it  themselves 
It  should  be  noted  that  much  of  the  faculty  does  not  know 

himself  “with  KSSf  3t  ^  006  haS  alread* 

mapsvvP  thp.Jet  Propulsion  Laboratory  has  been  using 

Astern1  ^he^ine  “  tbe  Federal  Telecommunications 

bystem.  The  line  quality  through  FTS  is  quite  poor.  This 

group  is,  howevef,  too  impatient  to  wait  for  the  AffA  connec¬ 
tion,  which  should  occur  in  the  summer.  The  group  has  a  con- 

,5act,  10  generate  integrals  of  hypergeometric  functions  which 
they  hope  to  do  with  MACSYMA.  wnicn 

A  doctoral  student  of  Prof.  G.  C.  Rota  has  been  using  MACSYMA 

Bectu=eStfg^e  ?lmPlif  f^ion  properties  of  linear  operator^ 

tailor-maL  ?nn£ar9e  ®1Ze  !?is  exPressi°ns,  he  has  used  a 
tailor  made  200K  version  of  the  system. 

Many  members  of  Project  MAC  and  the  Artificial  Intelligence 
Laboratory  have  made  casual  use  of  MACSYMA  for  solving9home- 
work  problems  and  the  like.  At  present,  we  do  not  keep  track 

nPPdU?Cef'fUh  usage,  but  we  tend  to  be  quickly  informed  of  the 
need  to  fix  bugs  and  improve  certain  aspects  of  the  system. 

G.  Future  Directions 

Future  efforts  of  the  group  will  be  concentrated  in  three 
directions. 

!•  Improvements  to  the  Current  System 

The  current  system  was  written  in  less  than  3  years  by 
essentially  4  people  (Fateman,  Martin,  Moses,  Wang).  This  has 
led  to  a  system  in  which  a  number  of  useful  features  were 
ignored  in  order  to  concentrate  on  others  which  were  deemed 

include?  t0tal  effort’  The  list  of  improvements 

a)  A  better  representation  of  matrices  - 
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Three  representations  exist  at  present, 
trying  to  consolidate  them. 


Paul  Wang  is 


b) 


A  more  efficient  input  parser  - 


The  current  parser  is  an  LR(1)  parser.  An  operator 
precedence  parser  is  being  designed  by  Steve  Saunders. 

c)  Better  storage  mechanisms  for  intermediate  results  - 

Several  schemes  for  storing  intermediate  results  of  a 
long  session  have  been  attempted  in  the  past  without 
much  success.  Jeffrey  Golden  is  working  on  this  project. 

interested  in  integrating  into  MACSYMA  significant 
capabilities  available  in  other  algebraic  manipulation  s-stems 

(e.g.  the  physics  package  in  REDUCE-2  and  Laplace  transform 
package  in  MATHLAB)  .  F  cransrorm 

e^otC^!hat  thS  large  ?Umber  of  users  of  MACSYMA  which  we 
jects  for  the  grouj!  &  V3riety  of  new  Pro~ 


2. 


gubsys terns  for  Important  Areas  of  Application 


iannr^ncr,t0-Cfeate  t .fr11?*  al"Purpose  system,  we  have  largely 
ignored  special  capabilities  desirable  in  only  one  or  two 
areas.  Areas  which  we  have  been  examining  are: 

a)  Numberical  Analysis  - 

One  important  use  of  an  algebraic  manipulation  system  is 
as  a  front  end  to  numerical  analysis  programs.  David 
Yun  has  used  MACSYMA  to  set  up  an  efficient  numerical 

of  1the°civilPprt^’al  dffferential  equations  for  members 
of  the  Civil  Engineering  and  Mathematics  departments. 


b) 


Optimization  and  Control 


David  Yur,  has  also  explored  the  use  of  MACSYMA  in  problems 
hpnrp^ran Z3tion  and  control  which  involve  parameters  and 
hence  cannot  be  easily  solved  by  numerical  techniques. 

c)  Perturbation  Theory 

Jeffrey  Golden  has  been  examining  the  possibility  of 

MArqYMrit:l^^henhniqUeS  from  Perturbation  theory  in 
MACSYMA.  h->-th  Dr.  Mark  Ablowitz  he  studied  the  stability 
of  a  classical  problem  in  applied  mathematics  last  summer. 

d)  Astronomy 

spectacular  achievements  of  algebraic  manipula- 
tion  have  occurred  in  astronomy.  Dr.  Andre  Deprit  P 
recently  received  the  only  awa.vd  in  computer  science 

latfon  N3tlo?al  Academy  of  Science  for  a  recalcu¬ 

lation  of  the  moon's  orbit.  This  calculation  originally 
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3. 


mistake  ****  «• 

believe  a  more  general  =mk  Uaed  a  tailor-made  system,  we 

ten  for  doing  such  a  JalcS^atfon  °^MACSYMA  ““Ube  ™kt- 
reasonable  efficiency.  latlon  and  many  others  with 

e)  Number  Theory  and  Combinatorics 

% !»  «»  to 

tond  our  cpLiUtSfL”^';™"!."001"  Uk'  “ 


Research  on  New  Algorithms 


user  to  ProvideUaamethodyf^rmsclvingUhit0  n°£  relied  on  the 

approach  of  people.  We  beliele  tha^it^av  nPaper  and  pencil" 
obtain  a  new  set  of  alaori th™f ®  * fc  fc  ay  be  Possible  to 

which  will  solve  the  traditional' omhf  P°Wfr  and  generality 
ticians.  traditional  problems  of  applied  mathema- 

The  approach  we  have  in  mind  in 

model  of  a  system  in  terms  of  «ffo  ^  ?lth  the  original 
tions  and  then  ask  the  questions  d? ^  nb^al  or  difference  equa- 
traditional  approach  has  hoon  <-  directly  of  this  model.  Th« 
closed  form  Si  of'L^i  I?1?*  “?  i„ 

exponentials,  Bessel  funtionff  a  special  functions  (e.g. 
stability)  of  the  solution  As  is  wel?  v3*  the  question  (e.g. 
possess  closed  form  solutions  »  known'  few  systems 

been  to  get  an  approximation  to  the  Solution 191  approach  has 
special  functions  and  e  solution  in  terms  of 

linear. ThiS  m°uA  f^quentlynf:”iSrwhena\1e°systiema^rnoi-a' 

theor ies 6 about  Import an t^propertiesSofbdiffe  f°t- a theory  °r 

integration  and  identitils  fi  l °n  properties  such  as 

is  some  hope  that  results  on  stabiliT^109*10"  rules)  ■  There 
well.  The  current  nitnc*.-  stability  are  forthcoming  as 

forthcoming  paper  in  the  ^Stl/a  d?scribed  in  Joel  Moses' 
y  P  per  in  the  25th  Anniversary  Issue  of  CACM. 

H.  SIGSAM 

Chairman Ind  TreasJrlr8  respectiilT  *’  ”artin  were  elected 
Group  on  Sympolic  and  Algebraic  Man^'  ?f^he  Special  Interest 
will  serve  in  then  po^TSS?  °f  AC»' 
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PLANNER 

The  PLANNER  project  is  implementing  a  high-level  goal-oriented 
language  on  Multics.  The  aim  is  to  have  a  clean  implementation 
of  a  procedural  foundation  for  problem  solving.  The  founda¬ 
tion  attempts  to  be  a  matrix  in  which  real  world  problem-solving 
knowledge  can  be  efficiently  and  naturally  embedded.  As  a 
first  step,  we  are  implementing  the  basics  of  the  control 
structure  and  data  structure. 

The  fundamental  data  structure  of  PLANNER  is  the  directed  graph 
with  named  links  and  nodes.  Any  data  element  can  be  used  as 
the  name  of  a  link.  Furthermore,  any  data  element  can  have 
links  associated  with  it.  The  actual  linkage  can  be  mechanized 
by  hash  coding,  indirect  addressing,  indexing,  or  by  a  proce¬ 
dure  call. 

Processes  are  the  active  elements  in  the  model.  Instantan¬ 
eously,  a  process  is  a  data  structure  in  its  own  right  con¬ 
sisting  of  a  pseudo-stack  of  activations  of  procedures.  The 
actions  of  processes  are  caused  by  executing  a  general  kind  of 
CALL  statement.  There  are  two  actions  for  each  CALL:  control 
leaving  a  procedure  and  control  returning  to  the  procedure. 
Control  can  leave  a  procedure  of  a  process  P  by  callinq  out  to 
any  of  the  following : 

1.  an  ordinary  function. 

2.  a  label  function  L  which  is  a  function  t*:at  returns  to 
the  block  in  which  L  is  defined  instead  of  to  the  point 
at  which  L  is  called. 

3.  a  port  which  is  a  communication  channel  between  processes. 

4.  some  combination  of  the  above. 


Control  can  be  resumed  in  the  process  P  by  one  of  the  fo1]-w 
ing : 


1.  an  ordinary  function  return. 

2.  receiving  a  container  of  values  on  a  port  in  which  the 
process  P  is  waiting. 

3.  some  combination  of  the  above  such  as  simultaneously 
waiting  on  several  ports  or  waiting  for  any  of  a  number 
of  ports. 


Our  goal  is  to  procedurally  embed  problem-solving  knowledge 
in  the  data  and  control  structure  so  that  it  can  be  effectively 
used.  The  overhead  of  a  mechanism  should  scale  in  proportion 
to  the  use  of  the  mechanism.  In  terms  of  control  structure 
we  are  implementing  some  ideas  of  Landau,  Bobrow,  and  Vfeqbreit 
for  a  pseudo-stack  for  processes.  The  efficiency  of  the'pseudo- 
stack  falls  off  linearly  in  proportion  to  the  degree  that 
stack  discipline  is  violated.  We  have  implemented  a  hash  cod¬ 
ing  scheme  which  scales  properly  with  respect  to  large  data 
bases  . 


Preceding  page  blank 
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A.  Adding  Knowledge 


In  constructing  models  we  need  the  ability  to  embed  more  know¬ 
ledge  in  the  model  without  having  to  totally  rewrite  it. 

Certain  kinds  of  additions  can  be  easily  encompassed  by  de¬ 
clarative  formalisms  such  as  the  quantificational  calculus  by 
simply  adding  more  axioms.  However,  declarative  calculi  do 
not  allow  new  deductive  procedures  to  bo  added.  We  are  imple¬ 
menting  mechanisms  that  allow  a  great  deal  of  flexibility  in 
adding  new  procedural  knowledge.  The  data  structures  of 
PLANNER  can  be  bound  to  the  control  structure  through  a  variety 
of  mechanisms.  The  mechanisms  provide  the  following  abilities: 

They  provide  the  means  by  which  knowledge  can  easily 
and  naturally  be  embedded. 

They  enable  new  knowledge  to  be  added  without  rewriting 
everything. 

They  make  it  possible  to  reorganize  the  connections 
between  the  pieces  of  knowledge. 

PLANNER  must  provide  interfaces  so  that  the  bindings  can  be 
controlled  by  knowledge  of  the  domain  of  the  problem.  The 
right  kind  of  interface  promotes  modularity  because  the  pro¬ 
cedures  on  the  other  side  of  the  interface  are  not  affected 
so  long  as  the  conventions  of  the  interface  are  not  changed. 
These  interfaces  aid  in  debugging  since  traps  and  checkpoints 
are  conveniently  placed  there.  More  generally,  formal  condi¬ 
tions  can  be  stated  for  the  interfaces  and  verified  once  and 
for  all. 

B.  Monitors 

The  mechanism  of  monitoring  allows  the  attachment  of  an 
arbitrary  procedure  (called  a  monitor)  to  a  location  so  th it 
whenever  the  contents  of  the  location  are  read,  changed,  or 
executed  the  monitor  will  be  invoked.  Monitors  allow  processes 
to  be  dynamically  bound  to  read,  write,  and  execute  operations 
on  particular  structures.  In  general,  whenever  data  is  examined 
or  modified,  there  must  be  a  mechanism  for  a  process  to  mediate 
the  action. 

C.  Ports 


Ports  act  as  communication  channels  between  processes.  They 
allow  the  output  of  some  processes  to  be  fed  to  others  without 
the  processes  having  to  know  each  others  names.  Thus  the 
connections  can  be  dynamically  reconfigured  without  affecting 
the  processes.  The  simplest  kind  of  port  consists  of  two 
queues.  The  first  queue  consists  of  containers  of  values  wait¬ 
ing  in  the  port  to  be  given  to  processes.  The  second  queue 
consists  of  processes  waiting  for  containers  of  values.  Typic¬ 
ally  either  or  both  queues  are  empty. 

D.  Data  Structure  Definitions 

A  data  structure  definition  binds  the  operational  properties 
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of  a  data  type  to  a  concrete  physical  representation.  For 
example,  sequences  can  be  physically  realized  in  a  variety 
ways . 

Consider  the  following  methods  for  realizing  the  sequence: 


of 

A, 


LIST 


NODE 


A  BC 


E.  Generator 

A  generator  is  a  function  of  no  arguments  which  can  be 
called  repeatedly  to  produce  the  elements  of  a  sequence. 

Thus  the  first  call  to  a  generator  for  the  sequence  would 
return  A,  the  second  cr.ll  B,  and  the  third  C.  Generators 
work  from  side-effects  since  they  are  always  entered  from  the 
top  with  no  arguments. 
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F .  Process 

A  process  (co-routine)  has  the  capability  of  being  resumed 
from  the  place  where  it  produced  its  last  value.  Thus,  unlike 
a  generator,  it  does  not  always  have  to  start  over  from  the 
top . 


Pattern  Matchinc 


Pattern  matching  is  a  natural  way  to  conditionally  recognize 
and  bind  the  substructures  of  a  particular  data  structure . 
Pattern  matching  procedures  preserve  visual  fidelity  since 
they  "look  like"  the  object  they  match.  Pattern  matching 
exhibits  controlled  binding  by  allowing  a  whole  class  of  data 
structures  to  be  specified. 


H.  Pattern  Directed  Retrieval 

Pattern-directed  retrieval  enables  data  structures  to  be  re¬ 
trieved  by  a  pattern  of  what  they  look  like.  For  example, 
the  pattern  (AT  NAUTILUS  PPLACE)  can  be  used  to  bind  the 
identifier  PLACE  to  the  location  of  the  NAUTILUS  if  it  appears 
in  the  data  base. 

I .  Pattern  Directed  Invocation 

Pattern-directed  invocation  enables  processes  to  be  invoked 
by  triggering  patterns .  It  is  a  convenient  way  to  bind  the 
processes  that  propagate  the  implications  of  updates  to  a 
model.  Recommendations  can  be  used  to  further  control  the 
binding  of  which  processes  will  actually  be  invoked.  Pattern- 
directed  invocation  is  often  used  as  a  kind  of  data  base 
monitor  or  "demon".  Demons  are  more  powerful  (but  less 
efficient)  than  ordinary  monitors  since  they  watch  for  changes 
to  a  whole  class  of  data  instead  of  just  a  single  location. 

J .  Simultaneous  Goals 

Often  we  need  to  be  able  to  achieve  more  than  one  goal  at 
once.  For  example,  we  might  want  to  have  Joe,  Fred,  and 
Martha  at  the  airport  at  three  o'clock.  We  might  be  tempted 
to  express  the  problem  as  follows: 


<achieve  (at  Joe  airport  3:00) > 

<achieve  (at  Fred  airport  3:00)> 

<achieve  (at  Martha  airport  3:00) > 

However  because  of  complicated  travel  arrangements,  we  might 
not  know  beforehand  the  order  in  which  to  try  to  get  the 
people  to  the  airport.  For  example,  some  of  the  people  might 
have  to  chauffer  others.  If  this  is  the  case,  then  we  don't 
want  to  bind  the  order  in  which  a  problem  solver  attempts  the 
goals.  We  would  prefer  to  write: 

Simultaneous 

(at  .Joe  airport  3:00) 

(at  Fred  airport  3:00) 

(at  Martha  airport  3:00) > 


100 


PLANNER 


K.  The  Fire  in  the  Warehouse 

In  this  section  we  present  an  example  to  illustrate  the  opera¬ 
tion  of  PLANNER'S  tree-structured  data  bases.  PLANNER  allows 
facts  and  procedures  to  be  stored  in  data  bases  where  they 
can  be  conveniently  retrieved.  The  data  bases  are  indexed 
using  hash  coding  so  that  the  time  to  retrieve  an  element  is 
almost  independent  of  the  size  of  the  data  base.  Suppose  that 
warehousel  has  $5000  worth  of  plywood,  $1000  of  bricks  and 
$4000  of  tractors.  Tractors  and  plywocd  are  flammable.  We 
can  express  this  more  formally  as: 

<assert  (in  warehousel  plywood  $5000) > 

<assert  (in  warehousel  bricks  $1000) > 

<assert  (in  warehousel  tractors  $4000) > 

<assert  (flammable  plywood) > 

<assert  (flammable  tractors)  > 


If  the  warehouse  burns  down,  then  everything  inside  of  it  which 
is  flammable  will  be  burned  up. 

<define  burn 

;"define  burn  to  be  the  following  procedure" 
<if-asserted 

(burn-down  : PLACE) 

;"if  (burn-down  :PLACE)  is 

asserted  then  bind  PLACE 
to  the  actual  location  and 
execute  the  following" 
for  "current"  (in  .PLACE  : THING  <?>  ) 

;"for  each  thing  that  is 
currently  in  the  place 
execute  the  following" 

<if  < current?  (flammable  .THING) > 

; ” i f  THING  is  flammable  then" 

(erase  (in  .PLACE  .THING  <?>  )> 

.•"erase  the  fact  that  THING  is  in  PLACE">>>> 

Now  let  us  suppose  that  warehousel  burns  down. 

< new -world  ( (WORLD2  <world>)) 

' "we  go  down  inside  a  new-world  (which  we  name 
WORLD2)  to  construct  our  experiment" 

; "this  new  world  starts  out  identical 

to  the  world  from  which  we  have  just 
come  but  changes  made  in  here  will 
not  affect  the  outside" 

(assert  (burn-down  warehousel ) > 

; " the  assertion  will  trigger  the  burn  ’demon'  which 
will  erase 

(in  warehousel  plywood  $5000)  and 
(in  warehousel  tractors  $4000) "> 

Now  we  can  compare  and  contrast  the  initial  world  with  WORLD2 
in  which  the  fire  took  place.  For  example,  we  can  ask  the 
value  of  the  contends  of  the  warehouse  destroyed  by  the  fire. 
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<for  "current- ;'finitial^e  the  L0SS  to  0" 

.  „  iln  warehousel  .‘THING  -VALUPi 
;  execute  the  following  for  eacS  ^  4 
<if  originally  in  warehouse?"  that  W9S 

•  VALUE)1  t"!>W0RLD2>,>rehOUSel  *THING 

W0RLD2  thenn 

'  add  the  VALUE  OF  THING  into  L05S">> 
which  is0the°value  o^th^ni  the  value  of  L°SS  will  be  $9000 

world  and  WORlDl^rl'bo^  SiSSbuloJ'?;10"-. 

cation,  when  we  have  finished  nnr  °r  fnsPectlon  and  rcodifi- 
save  the  resulting  worlds  S  discard  We  can  eitoS 

the  pertinent  information.  lscard  them  having  abstracted 
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A.  Summary 

The  Simpl  group  has  completed  its  implementation  of  the  Simpl 
interactive  simulation  language  on  Multics,  and  has  completed 
the  documentation  for  the  system.  The  completed  system  is 
being  submitted  to  the  Multics  Author-Maintained  Library  for 
general  use  on  Multics. 

B .  Review  of  the  Past  Year 

By  July,  197. ,  an  efficient  version  of  the  Simpl  translator 
and  run-time  system  (known  as  System  III)  had  been  implemented. 
Since  then,  the  system  has  undergone  five  additional  major 
evolutions,  described  below: 


System  IV  The  Simpl  statistical  features  (tables,  histograms, 
time-plots,  and  queueing  statistics)  and  tracing 
facilities  were  added. 


System  V  The  Simpl  Monitor,  which  enables  on-line  interac¬ 
tion  with  a  Simpl  model,  was  completed. 


System  VI  External  activities  and  connector  variables  were 
implemented,  and  a  central  error  handler  was  in¬ 
stalled  for  the  translator  and  run-time  system. 


System  VII  The  system  was  modified  to  handle  storage  alloca¬ 
tion  more  efficiently,  and  the  files  in  the  process 
directory  were  reorganized. 


System  VIII  Reactivation  labels  (in  the  translated  program)  and 
internal  static  label  variables  (in  the  translator 
and  run-time  system)  were  eliminated. 


We  had  hoped  to  recompile  the  entire  system  —  translator, 
run-time  package  and  monitor  —  with  the  new  version  II  PL/1 
compiler.  However,  even  by  late  in  May  it  was  still  not 
sufficiently  bug-free  to  allow  us  to  make  this  final  step. 

During  the  last  few  months ,  all  documentation  of  the  Simpl 
system  was  completed.  The  "Simpl  Primer"  and  "Simpl  Refer¬ 
ence  Manual"  were  updated  to  be  consistent  with  System  VIII, 
and  the  "Simpl  Implementation  Manual"  was  written,  which  des¬ 
cribes  the  internal  workings  of  the  entire  system.  All  three 
of  these  documents  will  be  published  as  MAC  TR's. 

There  are  no  future  plans  for  the  Simpl  Group. 
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THEORY  OF  AUTOMATA 

The  Automata  Theory  Group  is  concerned  with  the  structure  and 
complexity  of  computational  models  and  algorithms.  In  recent 
years,  major  interest  within  the  group  has  centered  on  the 
study  of  algorithms  and  decision  procedures.  This  study  has 
as  its  goals:  i)  The  analysis  and  design  of  optimal  algorithms 
for  basic  computational  tasks,  such  as  graph  "’"'nipulation, 
sorting,  scheduling,  and  various  arithmetic  calculations;  and 
ii)  The  development  of  methods  for  proving  that  certain  com¬ 
putational  tasks  are  inherently  difficult  to  perform.  In 
addition  to  this  emphasis  on  algorithms,  the  group  also  retails 
an  interest  in  some  of  the  more  traditional  problems  of  auto¬ 
mata  and  complexity  theory,  such  as  the  relationships  between 
the  structure  and  efficiency  of  various  computational  models, 
and  the  abstract  theory  of  the  complexity  of  recursive  func¬ 
tions  . 

The  major  accomplishments  of  the  last  year  are  outlined  in 
four  sections  below.  The  first  section,  titled  Inherently 
Complex  Decision  Problems,  describes  some  new  results  that 
provide,  for  the  first  time,  examples  of  "natural"  computation 
problems  that  can  be  shown  to  be  inherently  difficult.  The 
second  section,  Combinatorial  Algorithms,  describes  progress 
made  in  the  investigation  of  various  packing,  scheduling,  and 
sorting  problems.  The  last  two  sections  present  results  in 
several  more  "classical"  areas.  That  labelled  Computation  by 
Automata  includes  work  on  grammatical  transformations,  fault 
detection,  machine  decomposition,  complexity  of  Boolean  func¬ 
tions,  and  the  theory  of  program  schemas.  The  final  section 
describes  continuing  work  in  abstract  complexity  theory. 

A.  Inherently  Complex  Decision  Problems 

Godel's  celebrated  theorems  reveal  that  no  computer  program 
can  verify  all  the  true  statements  of  elementary  arithmetic. 
Nevertheless,  decision  procedures  have  been  developed  for  a 
number  of  more  restricted  classes  of  mathematical  statements. 
Four  years  ago  Rabin  succeeded  in  proving  that  there  is  an 
algorithmic  procedure  for  determining  the  truth  or  falsity  of 
an  arbitrary  sentence  of  what  is  called  the  monadic  second 
order  theory  of  two  successors  (S2S)  .  This  discovery  is  re¬ 
markable  because  S2S  is  one  of  the  few  decidable  theories  in 
which  it  is  possible  to  phrase  interesting  mathematical  state¬ 
ments  . 

Unfortunately,  Rabin's  decision  procedure  for  S2S  is  impossibly 
slow,  as  is  Buchi's  decision  procedure  for  the  weak  monadic 
second  order  theory  of  one  successor  (WS1S) ,  a  precursor  of 
Rabin's  work.  Attempts  have  been  made  to  reduce  the  enormous 
computations  involved  in  the  known  decision  procedures  for 
WS1S,  but  as  a  consequence  of  a  new  result  of  Prof.  A.  R.  Meyer, 
we  now  know  that  any  decision  procedures  for  WS1S,  S2S ,  and 
several  related  theories  must  involve  impractically  long 
computations. 

Meyer's  results  apply  equally  well  to  certain  first  order 
logical  theories.  As  a  specific  example,  consider  the  first 
order  theory  of  natural  number  addition  together  with  the  two- 
place  predicate  P,  where  F(x,y)  =  [x  is  a  power  of  2  that 
divides  y].  The  formulas  of  this  tbeory  are  obtained  in  the 
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usual  way  from  atomic  formulas  of  the  form  P(x,y)  and  x+y  =  z 
by  means  of  the  logical  connectives  and  quantifiers.  Thus 
Vx3y(P(y,y)  A  3z (x+z  =  y)) 

is  a  (true)  sentence  which  asserts  that  there  are  arbitrarily 
large  powers  of  two. 

Let  J  denote  the  set  of  all  sentences  of  this  theory.  Then 
there  exists  an  algorithmic  procedure'  for  determining  whether 
an  arbitrarily  specified  member  of  £  represents  a  true  asser¬ 
tion  about  the  natural  numbers.  The  idea  behind  th^s  proce¬ 
dure  is  that  for  any  formula  F(x)  in  the  theory,  it  is  possi¬ 
ble  to  construct  a  finite  automaton  •■hat  accepts  pr  cisely 
the  binary  representations  of  thost  n \tural  numbe-s  n  for 
which  F(n)  is  true.  Carrying  out  trtis  construction  for  a  given 
sentence  in  J  therefore  yields  an  automaton  that  accepts  every 
string  of  0’s  and  l’s  if  the  sentence  is  true  and  accepts  no 
string  if  the  sentence  is  false.  Since  it  is  relatively  easy 
to  determine  whether  an  automaton  accepts  all  input  strings, 
one  can  effectively  decide  whether  a  given  sentence  in  J  is 
true . 

The  difficulty  with  this  approach  is  that  sentences  of  length 
n  yield  automata  having  on  the  order  of  6(n)  states,  where 


2 

9  (n>  =2 

The  number  of  steps  neeued  to  determine  whether  such  an  auto¬ 
maton  accepts  every  input  string  is  therefore  of  the  same 
order.  Thus  although  it  is  in  theory  possible  to  determine 
the  true  sentences  of  ,  the  procedure  outlined  above  is 
totally  impractical.  Meyer's  result  shows  the  in  fact  every 
procedure  which  determines  the  true  sentences  oj.  a  must  use 
the  same  exorbitant  number  cf  steps.  Specifically: 

There  exists  a  number  €>0  such  that  for  any  Turing 
machine  that  decides  the  truth  of  sentences  ir  >$  , 
there  is  an  integer  nt-j  such  that  for  all  n  s  ng  there 
is  a  sentence  of  length  n  in  A  on  which  the  given 
machine  requires  at  least  8(Pn)  steps. 

Although  this  result  is  phrased  in  terms  of  Turing  machine 
computations,  essentially  the  same  result  holds  for  more  real¬ 
istic  computational  models,  since  even  the  most  powerful  model 
can  be  simulated  by  a  Turing  machine  in  an  amount  of  time  that 
is  very  small  compared  to  9(n). 

This  does  not  necessarily  mean  that  no  progress  can  be  made  in 
the  development  of  decision  procedures  for  the  theories  men¬ 
tioned  above.  It  might  be  that  there  are  fast  ad  hoc 
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procedures  for  all  sentences  of  length  less  than  (say)  10 
letters,  or  that  most  sentences  of  a  given  length  are  easy  to 
decide,  or  that  all  "interesting"  sentences  are  easy  to  decide. 
Nevertheless,  our  results  strongly  suggest  that  there  is  little 
hope  for  practical  application  of  many  decision  procedures  in 
logic. 

Another  interesting  conrequence  of  these  results  is  that  we 
now  have  examples  of  procedures  that  exhibit  the  Blum  jed- 
up  property.  Earlier  work  in  abstract  complexity  theory,  some 
of  which  was  carried  out  in  this  group,  established  the  exis¬ 
tence  of  computable  functions  with  speed-up,  but  it  did  not 
appear  that  any  natural  mathematical  problem  had  this  property. 
We  now  know  that  given  any  decision  procedure  for  A  ,  one  can 
effectively  construct  another  procedure  requiring  less  than 
the  logarithm  of  the  number  of  steps  of  the  given  procedure 
for  infinitely  many  sufficiently  long  sentences .  Thus  there 
is  no  optimal  decision  procedure  for  .) ,  and  no  exact  computa¬ 
tional  complexity  that  can  be  assigned  to  the  problem  of 
deciding  A-  . 

Meyer's  results  are  derived  in  part  from  the  work  of  several 
other  members  of  the  group.  One  of  the  key  ideas  in  Meyer's 
proof  comes  from  Larry  Stockmeyer's  study  of  the  complexity 
of  a  problem  in  automata  theory.  Stockmeyer  has  shown  that 
the  problem  of  deciding  whether  two  nondeterministic  finite 
automata  are  equivalent  requires  an  amount  of  time  that  grows 
faster  than  any  polynomial  function  of  the  size  of  the  automata. 
Robert  Loss ley  and  Charles  Rackoff  have  significantly  improved 
a  portion  of  the  proof  that  S2S  is  decidable.  Hossley,  Rackoff, 
and  Jeanne  Ferrante  also  obtained  corollaries  establishing  the 
inherent  computational  complexity  of  various  theories  related 
to  WS1S.  Efforts  are  now  being  made  to  extend  our  techniques 
to  the  first  order  theory  of  addition,  and  to  the  subcase  of 
existential  statements  about  addition.  Success  in  the  latter 
subcase  would  yield  lower  bounds  on  the  complexify  of  integer 
programming  and  related  combinatorial  problems  of  widespread 
interest. 

B.  Combinatorial  Algorithms 

The  area  of  combinatorial  algorithms,  which  at  first  sight 
seems  to  consist  of  many  unrelated  problems,  is  beginning  to 
show  some  coherence.  Within  the  last  year.  Cook  and  Karp  have 
proved  that  the  following  problems  are  computationally  equiv¬ 
alent: 

i)  Solving  a  zero-one  valued  travelling  salesman  problem 

ii)  Finding  a  maximal  size  clique  in  an  undirected  graph 

iii)  Finding  a  minimal  covering  of  a  family  of  sets 

iv)  Determining  whether  a  Boolean  function  is  identically 
equal  to  1. 

These  problems  are  "equivalent"  in  the  sense  that  a  fast 
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algorithm  for  solving  any  one  of  them  can  be  used  as  the  basis 
for  constructing  a  fast  algorithm  for  solving  any  one  of  the 
others.  (Here  a  "fast  algorithm"  is  one  whose  computation  time 
is  bounded  by  at  most  a  polynomial  function  of  the  size  of  the 
inputs.)  At  present,  all  known  algorithms  for  solving  these 
problems  require  an  amount  of  time  that  grows  exponentially 
with  the  size  of  the  input.  Thus  these  four  problems,  as  well 
as  many  other  familiar  combinatorial  problems,  are  hard  for 
the  same  reason--assuming  that  they  really  are  hard,  which 
remains  to  be  shown.  In  particular,  a  proof  that  any  one  of 
them  is  inherently  time  consuming  to  solve  would  automatically 
establish  that  they  all  are. 

Several  members  of  the  group  have  been  investigating  extensions 
of  the  Cook  and  Karp  classification.  As  already  noted,  Larry 
Stockmeyer's  efforts  to  classify  the  equivalence  problem  for 
nondeterministic  finite  automata  led  to  Meyer's  results  on 
decision  problems.  And  David  Johnson,  working  with  Professors 
Meyer  and  Fischer,  has  shown  the  following  problem  to  be  equiv¬ 
alent  to  the  Cook-Karp  problems:  Given  a  sequence  of  rational 
numbers  rj  ,.  .  .  ,r„  ,  where  0<  rj  s  1,  find  the  smallest  number  of 
unit-sized  "bins"  into  which  the  given  rational  numbers  can  be 
"packed"  subject  to  the  constraints  that  each  r^  is  assigned 
to  exactly  one  bin  and  that  the  sum  of  the  numbers  in  any  bin 
is  at  most  one. 

This  packing  problem  differs  from  the  problems  of  Cook  and  Karp 
in  one  important  respect.  Although  finding  an  optimal  packing 
appears  to  require  an  amount  of  time  that  grows  exponentially 
in  n,  there  are  very  efficient  packing  algorithms  that  give 
nearly  optimal  results.  Extending  earlier  work  of  Garey, 

Graham  and  Ullman,  David  Johnson  has  discovered  a  packing 
algorithm  that  is  guaranteed  to  operate  in  time  proportional 
to  n  and  that  never  uses  more  than  11/9  the  optimal  number  of 
bins.  Moreover,  it  has  been  shown  that  this  bound  of  11/9 
is  the  best  possible  one  for  the  class  of  fast  algorithms  under 
consideration.  Johnson  is  now  trying  to  extend  his  techniques 
to  various  covering  problems,  where  it  also  appears  that  effi¬ 
cient  methods  yielding  near  optimal  results  cun  be  found. 

In  a  related  area,  Prof.  C.  L.  Liu  has  been  investigating  the 
efficiency  of  various  algorithms  for  scheduling  -jobs  in  a 
multi-processor  computing  system.  Typical  of  the  problems 
studied  is  the  following.  A  set  of  tasks  { T ^ ,T2 , . . . ,Tr 1  are 
to  be  scheduled  on  a  two-processor  system,  where  the  execution 
time  of  each  task  is  known.  The  order  in  which  the  tasks  may 
be  performed  is  constrained  by  a  specified  partial  order  £  so 
that  if  T^ <  Tj  the  execution  of  Tj  must  not  begin  until  the 
execution  of  Ti  has  been  completed.  How  is  the  total  elapsed 
time  for  the  execution  of  all  the  tasks  affected  by  the  nature 
of  the  algorithm  used  to  schedule  the  tasks? 

One  of  the  major  results  obtained  is  a  quantification  of  the 
relative  efficiencies  of  preemptive  and  non-preemptive  sched¬ 
uling  algorithms.  (A  preemptive  schedule  is  one  in  which  the 
execution  of  one  task  may  be  interrupted  to  begin  another  task.) 
Let  o  denote  the  total  elapsed  time  required  for  the  execution 
of  a  given  set  of  tasks  when  an  optimal  non-preemptive  schedule 
is  used,  and  let  o'  denote  the  corresponding  time  when  an 
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optimal  preemptive  schedule  is  used.  Clearly, 

O'  ^  U)  1 

However ,  Liu  has  shown  that 


for  any  set  of  tasks  and  any  specified  partial  order  £  .  This 
result  can  be  extended  to  the  case  of  n  processors,  where 


Moreoever,  these  bounds  have  been  shown  to  be  the  tiqhtest 
possible  ones. 

Liu's  results  may  be  interpreted  as  follows.  The  introduction 
of  a  high-speed  drum  so  as  to  make  possible  the  use  of  preemp¬ 
tive  schedules  can  increase  the  speed  of  a  two-processor  com¬ 
puting  system  by  at  most  25%,  and  that  of  an  n-processor  sys¬ 
tem  by  -'l  rest  50%. 

Burton  Smith  and  Prof.  C.  L.  Liu  have  been  investigating  the 
behavior  of  sorting  networks  made  up  of  two-input,  two-output 
comparators.  Although  general  methods  for  designing  n-input, 
n-output  sorting  networks  are  known,  the  problem  of  designing 
networks  that  use  as  few  comparators  as  possible  is  very 
difficult.  One  of  the  best  networks  of  modest  size  known  to 
date,  due  to  M.  W.  Green,  uses  60  comparators  to  sort  16  in¬ 
puts.  Liu  has  recently  found  a  6 1- comparator ,  16-input  network, 
as  well  as  a  new  four-way  merge  technique  that  yields  a  4n 
inpu..  sorting  network  using  (n2  -  7  +  I0\An.  10  comparators 
for  any  n.  12n  9  '  T 

The  difficulty  of  designing  efficient  sorting  networks  is  due 
in  part  to  the  difficulty  of  determining  whether  or  not  a  given 
ne'-work  of  comparators  actually  sorts  its  inputs.  One  cri¬ 
terion  for  making  this  determination  is  Knuth's  zero— one  prin¬ 
ciple:  A  comparator  network  sorts  if  it  correctly  sorts  all 
possible  zero-one  valued  input  patterns.  Smith  has  shown  that 
this  criterion  is  sharp,  in  that  for  any  given  zero— one  input 
pattern  (other  than  the  all-zero  or  all-one  patterns)  there 
exists  a  network  that  correctly  sorts  every  zero-one  input 
pattern  except  the  one  in  question. 

Another  criterion  for  deciding  whether  a  network  sorts  is 
based  on  the  fact  that  many  sorting  networks  are  formed  by 
combining  several  sorting  networks  with  fewer  inputs.  Indeed, 
every  sorting  network  can  be  viewed  as  a  cascade  combination 
of  two— input  sorting  networks.  Liu  has  developed  a  procedure 
for  analyzing  certain  composite  networks  of  this  type  which  is 
useful  both  in  designing  sorting  networks  and  in  proving  that 
a  given  network  operates  correctly.  Smith  has  extended  Liu's 
work  to  apply  to  arbitrary  networks  of  comparators,  and  has 
developed  several  techniques  for  succinctly  characterizing  the 
patterns  that  can  appear  at  the  output  of  a  given  comparator 
network.  Such  characterizations  are  useful  in  designing 
networks  as  cascades  of  simpler  ones. 
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In  some  cases,  the  sec  of  possible  outputs  of  a  comparator  net¬ 
work  consists  of  precisely  those  patterns  of  vaJues  that  are 
consistent  with  a  particular  partial  order  on  the  output  ter¬ 
minals.  Smith  has  shown  that  if  this  is  true  when  the  network 
inputs  are  restricted  to  patterns  of  distinct  values,  it  must 
also  be  true  when  the  inputs  are  zero-one  valued.  In  the  case 
of  arbitrary  real-valued  inputs,  the  set  of  possible  outputs 
will  be  those  consistent  with  a  sing]  partial  order  if  and  only 
if  the  outputs  form  a  convex  set  in  t.idean  n-space.  This 
case  is  interesting  because  it  results  n  a  very  compact  des¬ 
cription  of  the  output  behavior  of  a  ne  fork.  However,  if  an 
n-input  sorting  network  is  designed  so  this  condition  obtains 
at  every  point  within  the  network,  t.he  network  will  necessarily 
require  (£)  comparators  and  hence  will  be  very  inefficient. 

C.  Computation  by  Automata 

Automata  and  formal  linguistic  models  have  many  applications 
in  the  study  of  computers  and  computation,  ranging  from  logi¬ 
cal  design  to  compiler  construction  to  complexity  theory. 

During  the  past  year,  several  members  of  the  group  have  ex¬ 
plored  computational  issues  arising  from  such  models.  Their 
results  are  outlined  below. 

1.  Grammatical  Transformations 

One  of  the  most  fruitful  developments  in  automata  theory  in 
recent  years  has  been  the  application  of  automata  theoretic 
ideas  to  problems  in  the  theory  of  languages  and  compilers. 
Substantial  progress  in  this  area  has  recently  been  made  by 
Michael  Hammer,  who  has  been  investigating  grammatical  trans¬ 
formations  that  are  capable  of  converting  given  programming 
language  grammars  into  equivalent  but  more  useful  grammars. 

In  particular,  he  has  found  a  class  of  transformations  yield¬ 
ing  grammars  whose  languages  can  be  parsed  top-down. 

While  top-down  parsing  has  a  number  of  advantages  over  bottom-up 
parsing,  the  grammars  that  admit  top-down  parses  (the  so- 
called  LL  grammars)  constitute  a  small  subset  of  those  that 
admit  bottom-up  parses  (the  LR  grammmars) .  Hammer  has  been 
working  with  a  subclass  of  the  LR  grammars  known  as  minimally 
predictive  (MP)  grammars.  These  grammars  can  be  parsed  in  a 
hybrid  fashion  that  is  basically  a  bottom-up  parse  with 
occasional  judi-ious  predictions.  A  procedure  has  been  found 
for  transforming  any  MP(k)  grammar  into  an  LL(k)  grammar  that 
generates  the  same  language.  Moreover,  this  transformation 
preserves  the  semantic  capabilities  of  the  original  grammar, 
in  the  sense  that  any  translations  supported  by  the  original 
grammar  are  also  supported  by  the  new  one. 

The  transformation  itself  is  based  on  the  structure  of  the 
finite-state  machine  that  directs  the  progress  of  a  bottom-up 
parse  for  che  given  LR  grammar.  The  first  step  is  to  split 
the  states  of  this  machine  in  such  a  way  as  to  break  certain 
kindu  of  loops  ir.  the  machine's  state  diagram.  Once  this  has 
been  done,  the  new  grammar  can  be  "read  off"  directly  from 
the  altered  machine.  Transformed  grammars  obtained  in  this 
way  can  be  shown  to  have  a  number  of  interesting  properties: 
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they  are  frequently  LR(0)rthey  support  a  wide  range  of  trans¬ 
lations,  and  they  can  be  parsed  quickly.  The  same  kind  of 
transformation  can  also  be  applied  to  certain  non-LR  grammars 
so  as  to  yield  equivalent  deterministic  grammars . 

Results  obtained  so  far  have  provided  new  insight  into  the 
nature  of  LL  and  LR  grammars  and  the  relationship  between  top- 
down  and  bottom-up  parsing.  Moreover,  this  work  promises  to 
have  applications  to  the  derivation  of  optimal  grammars  for 
use  in  practical  compilers. 

2 .  Fault  Detection 

It  is  of  considerable  practical  importance  to  be  able  to  deter¬ 
mine  experimentally  whether  a  given  piece  of  hardware  is 
operating  cc-rectly.  Although  a  variety  of  fault  detection 
and  diagnosis  techniques  are  available  for  use  in  practical 
situations,  the  essential  complexity  of  the  detection  and 
diagnosis  problems  is  still  poorly  understood.  In  particular, 
realistic  upper  and  lower  bounds  on  the  lengths  of  general 
fault-detection  experiments  for  sequential  circuits  have  yet 
to  be  established.  In  the  case  of  lower  bounds,  for  example, 
it  is  easy  to  see  that  a  valid  fault  detection  experiment  must 
cause  the  correctly  operating  circuit  to  traverse  each  of  its 
state  transitions  at  least  once,  an  observation  that  leads  to 
a  lower  bound  of  mn  for  the  length  of  a  fault  detection  exper¬ 
iment  for  an  m-input..  n-state  circuit.  However,  no  circuit 
admits  a  detection  experiment  of  this  short  a  length. 

Some  progress  in  this  area  has  been  made  by  Ken  Brown  in  work 
done  for  his  SB  thesis.  He  has  shown  that  every  fault  detec¬ 
tion  experiment  for  a  two-input  circuit  must  cause  the  circuit 
to  traverse  each  transition  at  least  once  and  half  of  the 
transitions  at  least  twice.  This  result  provides  a  lower  bound 
of  3n  for  the  length  of  detection  experiments  for  n-state, 
two-input  machines.  There  exist  circuits  for  which  this 
bound  is  attainable,  and  there  exists  a  class  of  circuits  for 
which  the  argument  leading  to  the  lower  bound  provides  a  simple 
set  of  necessary  aid  sufficient  conditions  for  an  input 
sequence  to  be  a  fault-checking  sequence.,  Thus  we  now  have 
examples  of  circuits  that  are  easy  to  test  and  an  accurate 
assessment  of  the  complexity  of  the  experiments  needed  to  test 
them.  We  expect  that  this  work  can  be  extended  so  as  to  yield 
more  accurate  bounds  for  more  general  classes  of  circuits. 

3.  Linear  Machines 

In  the  course  of  investigating  some  fault-detection  questions 
for  linear  sequential  machines,  Robert  Johnston  discovered  a 
new  approach  to  the  decomposition  of  a  broad  class  of  linear 
systems . 

The  usual  notion  of  a  linear  machine  as  one  whose  input  and 
state  spaces  are  vector  spaces  over  some  field  was  extended  to 
that  of  a  machine  whose  input  and  state  spaces  are  modules 
over  an  arbitrary  ring.  The  development  of  this  more  general 
class  of  machines  parallels  that  described  in  Kalman,  Talb, 
and  Arbib.  Johnston  next  derived  certain  conditions  that  are 
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what  must  be  required  of  the  flow-structure  of  programs  in 
order  to  achieve  a  certain  level  of  computational  power? 

Different  classes  of  schemas  have  different  expressive  powers. 
The  first  objective  of  Kfoury's  thesis  is  to  find  a  "univer¬ 
sal"  class  S  of  schemas  which,  when  interpreted  1^  any  alge¬ 
braic  structure,  yield  the  set  of  all  effective  procedures 
over  the  domain  of  that  structure  —  effective  relative  to  the 
underlying  relations  and  operations  of  the  structure.  Given 
an  arbitrary  class  S'  of  schemas,  Kfoury  investigates  condi¬ 
tions  on  an  algebraic  structure  CL  that  will  ensure  the  equi- 
valen  :e  of  S'  to  the  universal  class  S,  in  which  case  S'  will 
capture  the  notion  of  effectiveness  in  CL  .  In  particular,  he 
considers  the  class  of  flow-chart  schemas,  and  shows  that  they 
are  sufficient  to  '■apture  the  notion  of  effectiveness  in  many 
of  the  algebraic  structures  encountered  in  practice,  including 
rings,  fields,  and  ordered  fields. 

A  second  objective  of  the  thesis  is  to  compare  algebraic 
structures  in  terms  of  their  "algorithmic  behavior"  —  i.e., 
in  terms  of  the  properties  of  schemas  interpreted  in  those 
structures.  Kfoury  gives  special  attention  to  conditions 
under  which  this  algorithmic  behavior  is  the  same  for  related 
structures ,  such  as  two  groups  or  two  fields.  As  a  by-product 
of  this  investigation,  he  has  shown  that  over  some  familiar 
structures,  such  as  the  complex  number  field,  an  effective 
procedure  is  tot, •'l  only  if  it  is  equivalent  to  a  loop-free  pro¬ 
cedure. 

5  •  Complexity  of  Boolean  Functions 

In  order  to  explore  the  role  of  information-theoretic 
arguments  concerning  the  complexity  of  functions,  Bostjan 
Vilfan  has  been  studying  the  sizes  of  expressions  needed  to 
represent  certain  Boolean  functions.  In  particular,  he  has 
considered  expressions  built  up  from  variables  and  symbols 
for  the  Boolean  operations  of  and,  or,  not  and  exclusive  or, 
for  such  functions  as  the  n-variable  function  whose  value~Ts 
1  if  and  only  if  the  number  of  arguments  equal  to  1  is 
divisible  by  3.  Using  some  rather  deep  combinatorial  argu¬ 
ments,  Vilfan  has  shown  that  expressions  for  this  "divisible 
by  three"  function  of  n  variables  must  grow  nonlinearly  with 
n  no  matter  what  finite  set  of  basic  operations  are  allowed 
in  expressions.  This  lower  bound  is  close  to  being  the  best 
possible,  since  for  any  f  >  0  there  is  a  finite  set  of  opera¬ 
tions  in  terms  of  which  the  "divisible  by  three"  functions 
have  expressions  of  length  at  most  n1+p  . 
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Abstract  Complexity  Theory 

As  noted  in  our  last  progress  report,  the  development  of  ab¬ 
stract  complexity  theory  no  longer  constitutes  a  dominant  part 
of  the  group's  activity.  Nevertheless,  the  results  on  the  in¬ 
herent  complexity  of  decision  problems  cited  above  illustrate 
the  relationship  between  theoretical  work  in  complexity  and 
computational  problems  of  more  practical  interest.  VTe  expect, 
therefore,  to  maintain  a  small  research  effort  in  the  area  of 
abstract  complexity  theory. 

During  the  last  year,  Amitava  Bagchi,  Nancy  Lynch,  and  Robert 
Moll  have  all  made  valuable  contributions  to  complexity  theory. 

these  contributions ,  some  of  the  highly  developed  methods 
of  recursive  function  theory  have  been  brought  to  bear  on 
questions  of  complexity.  In  particular,  several  of  Lynch's 
and  Moll's  results  make  use  of  the  priority-injury  arg  iments 
of  recursion  theory . 

The  main  theorem  of  Lynch's  thesis  illustrates  the  nature  of 
these  results.  This  theorem  is  motivated  by  the  Cook- Karp 
result  noted  earlier  in  which  a  class  of  familiar  problems 
are  shown  to  be  computationally  equivalent.  Computationally 
equivalent  problems  have  solutions  that  are  equally  hard  to 
calculate.  Is  the  converse  true?  That  is,  if  two  decision 
problems  are  known  to  require  the  same  (large)  amount  of  time 
to  solve,  does  it  follow  that  the  ability  to  solve  one  pro¬ 
blem  in  no  time  at  all  (as  by  means  of  an  instantaneous 
oracle)  would  provide  a  way  of  solving  the  other  problem 
quickly?  Lynch  has  shown  that  for  any  decision  problem  wj  th  a 
known  lower  bound  on  the  time  required  for  solution,  there  are 
arbitrarily  complex  decision  problems  that  do  not  help  in  the 
solution  of  the  given  problem.  This  result  gives  mathematical 
meaning  to  the  intuitive  assertion  that  while  the  Cook-Karp 
problems  are  hard  for  the  same  reason,  other  equally  hard 
problems  are  hard  for  different  reasons. 
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Users  to  Drive  a  Time-Shared 
Computer  System,  S.M.  Thesis, 

EE  Dept. 

January  1969 

Guzman,  Adolfo 

Computer  Recognition  of  Three- 
Dimensional  Objects  in  a  Visual 
Scene,  Ph.D.  Thesis,  EE  Dept. 

December  1968 

Ledgard,  Henry  F. 

A  Formal  System  for  Defining  the 
Syntax  and  Semantics  of  Computer 
Languages,  Ph.D.  Thesis,  EE  Dept. 
April  1969 

Baecker,  Ronald  M. 

Interactive  Computer-Mediated  Animation, 
Ph.D.  T:\esis ,  EE  Dept. 

June  1969 

Tillman,  Coyt  C. ,  Jr.  (ESL-R-395) 

EPS:  An  Interactive  System  for 
Solving  Elliptic  Boundary-Value 
Problems  :ith  Facilities  for  Data 
Manipulation  and  General-Purpose 
Computation 
June  1969 

Brackett,  John  W.  ,  Michael  Hammer, 
and  Daniel  E.  Thornhill 
Case  Study  in  Interactive  Graphics 
Programming:  A  Circuit  Drawing 
and  Editing  Program  for  Use  with 
a  Storage-Tube  Display  Terminal 
October  1969 

Rodriguez,  Jorge  E.  (ESL-R-398) 

A  Graph  Model  for  Parallel  Computations, 
Sc.D.  Thesis,  EE  Dept. 

September  1969 

DeRemer,  Franklin  L. 

Practical  Translators  for  LR(k) 

Languages,  Ph.D.  Thesis,  EE  Dept. 
October  1969 

Beyer,  Wendell  T. 

Recognition  of  Topological  Invariants 
by  Iterative  Arrays,  Ph.D.  Thesis, 

Math.  Dept. 

October  1969 


AD  686-988 


AD  692-200 


AD  689-305 


AD  690-887 


AD  692-462 


AD  699-930 


AD  697-759 


AD  699-501 


AD  699-502 
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*  TR-67  Vanderbilt,  Dean  H. 

Controlled  Information  Sharing  in 
a  Computer  Utility,  Ph.D.  Thesis, 

EE  Dept. 

October  1969 

*  TR-68  Selwyn,  Lee  L. 

Economies  of  Scale  in  Computer  Use: 
Initial  Tests  and  Implications  for 
the  Computer  Utility,  Ph.D.  Thesis, 
Sloan  School 
June  1970 

*  TR-69  Gertz,  Jeffrey  L. 

Hierarchical  Associative  Memories 
for  Parallel  Computation,  Ph.D. 
Thesis,  EE  Dept. 

June  1970 


*  TR-70  Fillat,  Andrew  I.,  and  Leslie  A.  Kraning 

Generalized  Organization  of  Large 
Data-Bases:  A  Set-Theoretic 

Approach  to  Relations,  S.B.  & 

S.M.  Thesis,  EE  Dept. 

June  1970 

*  TR-71  Fiasconaro,  James  G. 

A  Computer-Controlled  Graphical 
Display  Processor,  S.M.  Thesis, 

EE  Dept. 

June  1970 


TR-72  Patil ,  Suhas  S. 

Coordination  of  Asynchronous  Events , 
Ph.D.  Thesis,  EE  Dept. 

June  1970 

*  TR-73  Griffith,  Arnold  K. 

Computer  Recognition  of  Prismatic 
Solids,  Ph.D.  Thesis,  Math.  Dept. 

August  1970 

TR-74  Edelberg ,  Murray 

Integral  Convex  Polyhedra  and  an 
Approach  to  Integralization , 

Sc.D.  Thesis,  EE  Dept. 

August  1970 

TR-75  Hebalkar,  Prakash  0. 

Deadlock-Free  Shari  .g  of  Resources 
in  Asynchronous  Systems,  Sc.D. 
Thesis,  EE  Dept. 

September  1970 


PUBLICATIONS 


AD  699-503 


AD  710-011 


AD  711-091 


AD  711-060 


AD  710-479 


AD  711-763 


AD  712-069 


AD  712-070 


AD  713-139 
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PUBLICATIONS 


*  TR-76 


TR-77 


TR-78 


1R-79 


TR-80 


*  TR-81 


*  TR-82 


TR-83 


*  TR-84 


Winston,  ,Patrick  H. 

Learning  Structural  Descriptions 

from  Examples,  Ph.D.  Thesis,  EE  Dept. 

September  1970 

Haggerty,  Joseph  P. 

Complexity  Measures  for  Language 
Recognition  by  Canonic  Systems, 

S.M.  Thesis,  EE  Dept. 

October  1970 

Madnick,  Stuart  E. 

Design  Strategies  for  Pile  Systems, 

S.M.  Thesis,  EE  Dept.  &  Sloan  School 

October  1970 

Horn,  Berthold  K. 

Shape  from  Shading:  A  Method  for 
Obtaining  the  Shape  of  a  Smooth 
Opaque  Object  from  One  View, 

Ph.D.  Thesis ,  EE  Dept. 

November  1§70 

Clark,  David  D.  ,  Robert  M.  Graham, 

Jerome  H.lSaltzer  and  Michael  D.  Schroeder 

The  Classroom  Information  and  Computing 
Service 


AD  713-988 


AD  715-134 


AD  714-269 


AD  717-336 


January  1971^ 

Banks ,  Edwin  R. 

Information  Processing  and  Transmission 
in  Cellular  Automata,  Ph.D.  Thesis, 

ME  Dept. 

January  1971 

Krakauer,  Lawrence  J. 

Computer  Analysis  of  Visual  Properties 
of  Curved  Objects,  Ph.D.  Thesis, 

EE  Dept . 

May  1971 

Lewin,  Donald  E. 

In-Process  Manufacturing  Quality 

Control,  Ph.D.  Thesis,  Sloan  School 

January  1971 

Winograd,  Terry 

Procedures  as  a  Representation  for 
Data  in  a  Computer  Program  for 
Understanding  Natural  Language, 

Ph.D.  Thesis,  Math.  Dept. 

February  1971 


AD  717-857 


AD  717-951 


AD  723-647 


AD  720-098 


AD  721-399 
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PUBLICATIONS 


TR-85  Miller,  Perry  L. 

Automatic  Creation  of  a  Code  Generator 
from  a  Machine  Description,  Elec.  E. 
Decree,  EE  Dept. 

May  1.971 

TR-86  Schell,  Roger  R. 

Dynamic  Reconfiguration  in  a  Modular 
Computer  System,  Ph.D.  Thesis, 

EE  Dept. 

June  1971 

TR-87  Thomas,  Robert  H. 

A  Model  for  Process  Representation 

and  Synthesis,  Ph.D.  Thesis,  EE  Dept. 

June  1971 

TR-88  Welch,  Terry  A. 

Bounds  on  Information  Retrieval 

Efficiency  in  Static  File  Structures, 
Ph.D.  Thesis,  EE  Dept. 

June  1971 

TR-89  Owens,  Richard  C. ,  Jr. 

Primary  Access  Control  in  Large- 
Scale  Time-Shared  Decision 
Systems,  S.M.  Thesis,  Sloan  School 

July  1971 

TR-90  Lester,  Bruce  P. 

Cost  Analysis  of  Debugging  Systems, 

S.M.  &  S.B.  Thesis,  EE  Dept. 

September  1971 

*  TR-91  Smoliar,  Stephen  W. 

A  Parallel  Processing  Model  of 

Musical  Structures,  Ph.D.  Thesis, 
Math.  Dept. 

September  1971 

TR-92  Wang,  Paul  S. 

Evaluation  of  Definite  Integrals 
by  Symbolic  Manipulation,  Ph.D. 
Thesis,  Math.  Dept. 

October  1971 

TR-93  Greif,  Irene  Gloria 

Induction  in  Proofs  about  Programs 
S.M.  Thesis,  EE  Dept. 

February  1972 

TR-94  Hack,  Michel  Henri  Theodore 

Analysis  of  Production  Schemata 

by  Petri  Nets,  P.M.  Thesis,  EE  Dept. 

February  1972 


AD  724-730 


AD  725-859 


AD  726-049 


AD  725-429 


AD  728-036 


AD  730-521 


AD  731-690 


AD  732-005 


AD  737-701 


AD  740-320 
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PUBLICATIONS 


TR-95  Fateman,  Richard  J. 

Essays  in  Algebraic  Simplification, 

(A  re vi *3 ion  of  a  Harvard  Ph.D.  Thesis) 

April  1972  AD  740-132 


TR-95  Manning ,  Frank 

Autonomous,  Synchronous  Counters 

Constructed  Only  of  J-K  Flip-Flops, 

S.M.  Thesis,  EE  Dept. 

May  1972  AD  744-030 

TR-97  Vilfan,  Bostjan 

The  Complexity  of  Finite  Functions, 

Ph.D.  Thesis,  EE  Dept. 

March  1972  AD  739-678 

TR-98  Stockmeyer,  Larry  Joseph 

Bounds  on  Polynomial  Evaluation 
Algorithms,  S.M.  Thesis,  EE  Dept. 

April  1972  AD  740-328 

TR-99  Lynch,  Nancy  Ann 

Relativization  of  the  Theory  of 

Computational  Complexity,  Ph.D.  Thesis, 

Math.  Dept. 

June  1972  AD  744-032 

TR-100  Mandl,  Robert 

Further  Results  on  Hierarchies 
of  Canonic  Systems,  S.M.  Thesis, 

EE  Dept. 

June  1972  AD  744-206 

TR-101  Dennis,  Jack  B. 

On  the  Design  and  Specification  of 
a  Common  Base  Language 

June  1972  AD  744-207 


TR's  5,  9,  10,  15  were  never  issued 
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PUBLICATIONS 


TM-11 


TM-12 


*  TM-13 


*  TM-14 


TM-10  Jackson,  James  N. 

Interactive  Design  Coordination  for 
the  Building  Industry 
June  1970 

Ward,  Philip  w. 

Description  and  Plow  Chart  of  the 
Julfmo  Communicatio^  Package 

Graham,  Robert  M. 

Pile  Management  and  Related  Topics 
(Formerly  Programming  Linguistics 
Group  Memo  No. 6,  June  12,  1970) 
September  1970 

Graham,  Robert  M, 

Use  of  High  Level  Languages  for 
Systems  Programming 
(Formerly  Programming  Linguistics 
Group  Memo  No. 2,  November  20,  1969) 
September  1970 

Vogt,  Carla  M. 

Suspension  of  Processes  in  a  Multi¬ 
processing  Computer  System 
(Based  on  S.M.  Thesis,  EE  Dept., 
February  1970)  F 

September  1970 

Zilles,  Stephen  N. 

Ar.  Expansion  of  the  Data  Structuring 
Capabilities  of  PAL 
(Based  on  S.M.  Thesis,  EE  Dept 
June  1970)  ft 

Oe^cher  1970 

Bruere-Dawson ,  Gerard 
Pseudo— Random  Seguences 

^Based  on  S.M.  Thesis,  EE  Dept., 
oune  1970)  F 

October  1970 

Goodman,  Leonard  I. 

Complexity  Measures  for  Programming 
Languages,  (Based  on  S.M.  Thesis, 

Eh  Dept.,  September  1971) 

September  1971 

*  TM-18  Reprinted  as  TR-85 

*  TM-19  Fenichel ,  Robert  R. 

A  New  List-Tracing  Algorithm 
October  1970 


*  TM-15 


*  TM-16 


TM-17 


AD  708-400 


AD  711-379 


AD  712-068 


AD  711-965 


AD  713-989 


AD  720-761 


AD  713-852 


AD  729-011 


AD  714-522 
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PUBLICATIONS 


*  TM-20  Jones,  Thomas  L. 

A  Computer  Model  of  Simple  Forms 

of  Learning,  (Based  on  Ph.D.  Thesis, 
EE  Dept. ,  September  1970) 

January  1971 

*  TM-21  Goldstein,  Robert  C. 

The  Substantive  Use  of  Computers 
for  Intellectual  Activities 
April  1971 

TM-22  Wells,  Douglas  M. 

Transmission  of  Information  Between 
a  Man-Machine  Decision  System  and 
Its  Environment 
April  1971 

TM-23  Strnad,  Alois  J. 

The  Relational  Approach  to  the 
Management  of  Data  Base? 

April  1971 

*  TM-24  Goldstein ,  Robert  C.  and  Alois  J.  Strnad 

The  MacAIMS  Data  Management  System 
April  1971 

*  TM-25  Goldstein,  Robert  C. 

Helping  People  Think 
April  1971 

TM-26  Iazeolla,  Giuseppe  G. 

Modeling  and  Decomposition  of 

Information  Systems  for  Performance 
Evaluation 
June  1971 

TM-27  Bagchi,  Amitava 

Economy  of  Descriptions  and 
Minimal  Indices 
January  1972 

TM-28  Wong,  Richard 

Construction  Heuristics  for  Geometry 
and  a  Vector  Algebra  Representation 
of  Geometry 
June  1972 

TM-29  Hossley,  Robert  and  Charles  Rackoff 
The  Emptiness  Problem  for  Automata 
on  Infinite  Trees 
Spring  1972 


AD  720-337 


AD  721-618 


AD  722-837 


AD  721-619 


AD  721-620 


AD  721-998 


AD  733-965 


AD  736-960 


AD  743-487 


AD  747-250 


TM's  1-9  were  never  issued 
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*  Project  MAC  Progress  Report  I 

to  July  1964 

Project  MAC  Progress  Report  II 
July  1964-July  1965 

*  Project  MAC  Progress  Report  III 

July  19 6 5- July  1966 

Project  MAC  Progress  Report  IV 
July  1966-July  1967 

Project  MAC  Progress  Report  V 
July  196  7-July  1968 

Project  MAC  Progress  Report  VI 
July  1968-July  1969 

Project  MAC  Progress  Report  VII 
July  1969-July  1970 

Project  MAC  Progress  Report  VIII 
July  19  70-July  1971 

Project  MAC  P. ogress  Report  IX 
July  IS 71-July  1972 


PUBLICATIONS 

AD  465-088 
AD  629-494 
AD  648-346 
AD  681-342 
AD  687-770 
AD  705-434 
AD  732-767 
AD  735-148 
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